{"level":"info","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"042cf0e4-fdd4-40d3-873d-fb618219106a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"042cf0e4-fdd4-40d3-873d-fb618219106a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41190","PortSpecifier":{"PortValue":41190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","object":"source:{address:{socket_address:{address:\"10.133.0.10:41190\" port_value:41190}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772036 nanos:958340464} http:{id:\"1f80fe63-cc9c-4462-9a4d-2e9782002587\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"1f80fe63-cc9c-4462-9a4d-2e9782002587\"} path:\"/llm/facebook-opt-125m-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aRAFugzMsaBc32bN_ObNSRARs3gAtMenu3TFai1lRFHsK1sTI71bsLOHBpsj"} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ea34a74-abdb-45a8-8342-474057e4f21e","keyName":"e2e-default-key-main","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"3ea34a74-abdb-45a8-8342-474057e4f21e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1f80fe63-cc9c-4462-9a4d-2e9782002587"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":958340464,"seconds":1789772036}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":41190},"address":"10.133.0.10:41190"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1f80fe63-cc9c-4462-9a4d-2e9782002587"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":958340464,"seconds":1789772036},"url_path":"/llm/facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:41190","port":41190}}} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-default-key-main"} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3ea34a74-abdb-45a8-8342-474057e4f21e","keyName":"e2e-default-key-main","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f80fe63-cc9c-4462-9a4d-2e9782002587","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1d871af-b5be-4cda-962b-d729273f356b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41194","PortSpecifier":{"PortValue":41194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1d871af-b5be-4cda-962b-d729273f356b","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1d871af-b5be-4cda-962b-d729273f356b","object":"source:{address:{socket_address:{address:\"10.133.0.10:41194\" port_value:41194}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772037 nanos:665203427} http:{id:\"f1d871af-b5be-4cda-962b-d729273f356b\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"f1d871af-b5be-4cda-962b-d729273f356b\"} path:\"/llm/facebook-opt-125m-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aRAFugzMsaBc32bN_ObNSRARs3gAtMenu3TFai1lRFHsK1sTI71bsLOHBpsj"} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ea34a74-abdb-45a8-8342-474057e4f21e","keyName":"e2e-default-key-main","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"3ea34a74-abdb-45a8-8342-474057e4f21e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1d871af-b5be-4cda-962b-d729273f356b","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f1d871af-b5be-4cda-962b-d729273f356b"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"f1d871af-b5be-4cda-962b-d729273f356b","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":665203427,"seconds":1789772037}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":41194},"address":"10.133.0.10:41194"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f1d871af-b5be-4cda-962b-d729273f356b"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"f1d871af-b5be-4cda-962b-d729273f356b","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":665203427,"seconds":1789772037},"url_path":"/llm/facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:41194","port":41194}}} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-default-key-main"} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d871af-b5be-4cda-962b-d729273f356b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3ea34a74-abdb-45a8-8342-474057e4f21e","keyName":"e2e-default-key-main","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1d871af-b5be-4cda-962b-d729273f356b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:53:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1d871af-b5be-4cda-962b-d729273f356b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33390","PortSpecifier":{"PortValue":33390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72bff878-c966-4cd2-9b91-adef1ae045c5","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","object":"source:{address:{socket_address:{address:\"10.133.0.10:33390\" port_value:33390}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772038 nanos:707008834} http:{id:\"72bff878-c966-4cd2-9b91-adef1ae045c5\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"72bff878-c966-4cd2-9b91-adef1ae045c5\"} path:\"/llm/facebook-opt-125m-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aRAFugzMsaBc32bN_ObNSRARs3gAtMenu3TFai1lRFHsK1sTI71bsLOHBpsj"} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ea34a74-abdb-45a8-8342-474057e4f21e","keyName":"e2e-default-key-main","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"3ea34a74-abdb-45a8-8342-474057e4f21e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"72bff878-c966-4cd2-9b91-adef1ae045c5"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"72bff878-c966-4cd2-9b91-adef1ae045c5","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":707008834,"seconds":1789772038}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33390},"address":"10.133.0.10:33390"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"72bff878-c966-4cd2-9b91-adef1ae045c5"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"72bff878-c966-4cd2-9b91-adef1ae045c5","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":707008834,"seconds":1789772038},"url_path":"/llm/facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:33390","port":33390}}} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-default-key-main"} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3ea34a74-abdb-45a8-8342-474057e4f21e","keyName":"e2e-default-key-main","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:53:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72bff878-c966-4cd2-9b91-adef1ae045c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33402","PortSpecifier":{"PortValue":33402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","object":"source:{address:{socket_address:{address:\"10.133.0.10:33402\" port_value:33402}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772044 nanos:51490995} http:{id:\"e4b0894d-c2d0-42c4-982f-0d115276d59d\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"e4b0894d-c2d0-42c4-982f-0d115276d59d\"} path:\"/llm/facebook-opt-125m-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aRAFugzMsaBc32bN_ObNSRARs3gAtMenu3TFai1lRFHsK1sTI71bsLOHBpsj"} {"level":"debug","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ea34a74-abdb-45a8-8342-474057e4f21e","keyName":"e2e-default-key-main","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"3ea34a74-abdb-45a8-8342-474057e4f21e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":false,"error":"not_found","message":"requested subscription not found","phase":"","ready":false}} {"level":"debug","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","input":{"auth":{"identity":"Bearer **** subscription not found","phase":"","ready":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"e4b0894d-c2d0-42c4-982f-0d115276d59d"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":51490995,"seconds":1789772044}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33402},"address":"10.133.0.10:33402"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"e4b0894d-c2d0-42c4-982f-0d115276d59d"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":51490995,"seconds":1789772044},"url_path":"/llm/facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:33402","port":33402}}} {"level":"debug","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-09-18T22:54:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b0894d-c2d0-42c4-982f-0d115276d59d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":"not_found"}],"body":"requested subscription not found"}} {"level":"info","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"794fa298-4348-4943-bb04-1ee0699bd4c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55450","PortSpecifier":{"PortValue":55450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"794fa298-4348-4943-bb04-1ee0699bd4c1","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"794fa298-4348-4943-bb04-1ee0699bd4c1","object":"source:{address:{socket_address:{address:\"10.133.0.10:55450\" port_value:55450}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772049 nanos:93736434} http:{id:\"794fa298-4348-4943-bb04-1ee0699bd4c1\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-unconfigured-model\"} headers:{key:\"x-request-id\" value:\"794fa298-4348-4943-bb04-1ee0699bd4c1\"} path:\"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"794fa298-4348-4943-bb04-1ee0699bd4c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aRAFugzMsaBc32bN_ObNSRARs3gAtMenu3TFai1lRFHsK1sTI71bsLOHBpsj"} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"794fa298-4348-4943-bb04-1ee0699bd4c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"794fa298-4348-4943-bb04-1ee0699bd4c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ea34a74-abdb-45a8-8342-474057e4f21e","keyName":"e2e-default-key-main","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"3ea34a74-abdb-45a8-8342-474057e4f21e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"794fa298-4348-4943-bb04-1ee0699bd4c1","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"794fa298-4348-4943-bb04-1ee0699bd4c1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":false,"error":"model_not_in_subscription","message":"subscription simulator-subscription does not include model llm/e2e-unconfigured-facebook-opt-125m-simulated","phase":"","ready":false}} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"794fa298-4348-4943-bb04-1ee0699bd4c1","input":{"auth":{"identity":"Bearer **** simulator-subscription does not include model llm/e2e-unconfigured-facebook-opt-125m-simulated","phase":"","ready":false}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-unconfigured-model","x-request-id":"794fa298-4348-4943-bb04-1ee0699bd4c1"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"794fa298-4348-4943-bb04-1ee0699bd4c1","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":93736434,"seconds":1789772049}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55450},"address":"10.133.0.10:55450"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-unconfigured-model","x-request-id":"794fa298-4348-4943-bb04-1ee0699bd4c1"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"794fa298-4348-4943-bb04-1ee0699bd4c1","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":93736434,"seconds":1789772049},"url_path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:55450","port":55450}}} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"794fa298-4348-4943-bb04-1ee0699bd4c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"794fa298-4348-4943-bb04-1ee0699bd4c1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"794fa298-4348-4943-bb04-1ee0699bd4c1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":"model_not_in_subscription"}],"body":"subscription simulator-subscription does not include model llm/e2e-unconfigured-facebook-opt-125m-simulated"}} {"level":"info","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08710562-717d-4662-8164-4d3c3dc38663","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55454","PortSpecifier":{"PortValue":55454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08710562-717d-4662-8164-4d3c3dc38663","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08710562-717d-4662-8164-4d3c3dc38663","object":"source:{address:{socket_address:{address:\"10.133.0.10:55454\" port_value:55454}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772049 nanos:900618759} http:{id:\"08710562-717d-4662-8164-4d3c3dc38663\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"08710562-717d-4662-8164-4d3c3dc38663\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08710562-717d-4662-8164-4d3c3dc38663","tokenreview":{"name":""}} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08710562-717d-4662-8164-4d3c3dc38663","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2fcb22c2-2562-4004-9b21-dd5981b97d5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"uid":"d8c6b967-c215-43a5-a98f-fb76de15d3a0","username":"system:serviceaccount:models-as-a-service:e2e-sa-no-sub"}}} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08710562-717d-4662-8164-4d3c3dc38663","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2fcb22c2-2562-4004-9b21-dd5981b97d5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"uid":"d8c6b967-c215-43a5-a98f-fb76de15d3a0","username":"system:serviceaccount:models-as-a-service:e2e-sa-no-sub"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"08710562-717d-4662-8164-4d3c3dc38663"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"08710562-717d-4662-8164-4d3c3dc38663","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":900618759,"seconds":1789772049}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55454},"address":"10.133.0.10:55454"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"08710562-717d-4662-8164-4d3c3dc38663"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"08710562-717d-4662-8164-4d3c3dc38663","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":900618759,"seconds":1789772049},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:55454","port":55454}}} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08710562-717d-4662-8164-4d3c3dc38663","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08710562-717d-4662-8164-4d3c3dc38663","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08710562-717d-4662-8164-4d3c3dc38663","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08710562-717d-4662-8164-4d3c3dc38663","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:models-as-a-service:e2e-sa-no-sub"} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08710562-717d-4662-8164-4d3c3dc38663","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:models-as-a-service\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08710562-717d-4662-8164-4d3c3dc38663","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:54:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08710562-717d-4662-8164-4d3c3dc38663","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55464","PortSpecifier":{"PortValue":55464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","object":"source:{address:{socket_address:{address:\"10.133.0.10:55464\" port_value:55464}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772050 nanos:265118133} http:{id:\"2e7bfdc2-c163-4710-9607-79962a7fcf93\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"2e7bfdc2-c163-4710-9607-79962a7fcf93\"} path:\"/llm/facebook-opt-125m-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bWg87xZY1V6TFtci_lsXWEPocynWPjfT0375dHrkLNWQT5SGfWGcuXeFWtjB"} {"level":"debug","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"keyId":"f97b3efb-7f60-4d37-90d4-93546757cf14","keyName":"e2e-sa-no-sub-key","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"f97b3efb-7f60-4d37-90d4-93546757cf14","username":"system:serviceaccount:models-as-a-service:e2e-sa-no-sub","valid":true}} {"level":"debug","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":false,"error":"not_found","message":"requested subscription not found","phase":"","ready":false}} {"level":"debug","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","input":{"auth":{"identity":"Bearer **** subscription not found","phase":"","ready":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2e7bfdc2-c163-4710-9607-79962a7fcf93"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":265118133,"seconds":1789772050}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55464},"address":"10.133.0.10:55464"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2e7bfdc2-c163-4710-9607-79962a7fcf93"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":265118133,"seconds":1789772050},"url_path":"/llm/facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:55464","port":55464}}} {"level":"debug","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-09-18T22:54:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e7bfdc2-c163-4710-9607-79962a7fcf93","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":"not_found"}],"body":"requested subscription not found"}} {"level":"info","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55474","PortSpecifier":{"PortValue":55474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","object":"source:{address:{socket_address:{address:\"10.133.0.10:55474\" port_value:55474}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772058 nanos:220618766} http:{id:\"b6f7fceb-a861-4f84-be80-16dd9fdc7d74\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"33\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"b6f7fceb-a861-4f84-be80-16dd9fdc7d74\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","tokenreview":{"name":""}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c497a594-80d9-47ec-a6d6-9d807253949c"]},"groups":["system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"uid":"59fbe617-a770-4609-a750-3219d36b60af","username":"system:serviceaccount:models-as-a-service:e2e-sa-single-sub"}}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c497a594-80d9-47ec-a6d6-9d807253949c"]},"groups":["system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"uid":"59fbe617-a770-4609-a750-3219d36b60af","username":"system:serviceaccount:models-as-a-service:e2e-sa-single-sub"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"33","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":220618766,"seconds":1789772058}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55474},"address":"10.133.0.10:55474"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"33","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":220618766,"seconds":1789772058},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:55474","port":55474}}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:models-as-a-service:e2e-sa-single-sub"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:models-as-a-service\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6f7fceb-a861-4f84-be80-16dd9fdc7d74","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55490","PortSpecifier":{"PortValue":55490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","object":"source:{address:{socket_address:{address:\"10.133.0.10:55490\" port_value:55490}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772058 nanos:256859968} http:{id:\"25812b65-8206-4356-ba4b-8c1d6036b1dc\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"25812b65-8206-4356-ba4b-8c1d6036b1dc\"} path:\"/llm/facebook-opt-125m-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11pl5qM1plSD41L9Y_7A3ytEVX2muWec5Mf89y8cyEJqLMNFxYuxaXnc7vUld"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"keyId":"6c9f60ea-a515-4a0b-afce-0786475fb93f","keyName":"e2e-sa-single-sub-key","subscription":"e2e-test-subscription-single-sub","tenant":"models-as-a-service","userId":"6c9f60ea-a515-4a0b-afce-0786475fb93f","username":"system:serviceaccount:models-as-a-service:e2e-sa-single-sub","valid":true}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-test-subscription-single-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","input":{"auth":{"identity":"Bearer **** simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-test-subscription-single-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"25812b65-8206-4356-ba4b-8c1d6036b1dc"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":256859968,"seconds":1789772058}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55490},"address":"10.133.0.10:55490"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"25812b65-8206-4356-ba4b-8c1d6036b1dc"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":256859968,"seconds":1789772058},"url_path":"/llm/facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:55490","port":55490}}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-test-subscription-single-sub"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:models-as-a-service:e2e-sa-single-sub"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:models-as-a-service\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-sa-single-sub-key"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:models-as-a-service,system:authenticated","keyId":"6c9f60ea-a515-4a0b-afce-0786475fb93f","keyName":"e2e-sa-single-sub-key","selected_subscription":"e2e-test-subscription-single-sub","selected_subscription_key":"models-as-a-service/e2e-test-subscription-single-sub@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-test-subscription-single-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:models-as-a-service:e2e-sa-single-sub"}} {"level":"info","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:54:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25812b65-8206-4356-ba4b-8c1d6036b1dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50260","PortSpecifier":{"PortValue":50260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","object":"source:{address:{socket_address:{address:\"10.133.0.10:50260\" port_value:50260}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772059 nanos:544598097} http:{id:\"d33a8338-5e3f-483b-b7a0-a85ca06118f6\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"80\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"d33a8338-5e3f-483b-b7a0-a85ca06118f6\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=372d1d06-5d5f-4883-9cef-d02d62377798"]},"groups":["system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"uid":"c18eaa22-1633-4fd6-86ec-ac63d3ff61fa","username":"system:serviceaccount:models-as-a-service:e2e-sa-group-auth-only"}}} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=372d1d06-5d5f-4883-9cef-d02d62377798"]},"groups":["system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"uid":"c18eaa22-1633-4fd6-86ec-ac63d3ff61fa","username":"system:serviceaccount:models-as-a-service:e2e-sa-group-auth-only"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"80","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":544598097,"seconds":1789772059}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50260},"address":"10.133.0.10:50260"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"80","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":544598097,"seconds":1789772059},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:50260","port":50260}}} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:models-as-a-service:e2e-sa-group-auth-only"} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:models-as-a-service\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d33a8338-5e3f-483b-b7a0-a85ca06118f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50270","PortSpecifier":{"PortValue":50270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","object":"source:{address:{socket_address:{address:\"10.133.0.10:50270\" port_value:50270}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772059 nanos:927814767} http:{id:\"139f3ef4-3d3c-40c6-9e95-63d7eff57699\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"139f3ef4-3d3c-40c6-9e95-63d7eff57699\"} path:\"/llm/facebook-opt-125m-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A2HJT4CKMbWaGsIB_ERYe4wj9ygkghJcQNucwhibMGgPdgmlzeaQnSFV7AM3"} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"keyId":"4f11fe50-49ee-4ddf-b32f-9a5cdbf22e82","keyName":"e2e-sa-group-auth-only-key","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"4f11fe50-49ee-4ddf-b32f-9a5cdbf22e82","username":"system:serviceaccount:models-as-a-service:e2e-sa-group-auth-only","valid":true}} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":false,"error":"not_found","message":"requested subscription not found","phase":"","ready":false}} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","input":{"auth":{"identity":"Bearer **** subscription not found","phase":"","ready":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":927814767,"seconds":1789772059}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50270},"address":"10.133.0.10:50270"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":927814767,"seconds":1789772059},"url_path":"/llm/facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:50270","port":50270}}} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-09-18T22:54:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"139f3ef4-3d3c-40c6-9e95-63d7eff57699","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":"not_found"}],"body":"requested subscription not found"}} {"level":"info","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:56556","PortSpecifier":{"PortValue":56556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","object":"source:{address:{socket_address:{address:\"10.133.0.10:56556\" port_value:56556}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772123 nanos:807449648} http:{id:\"b10fdbe7-d805-4141-9968-7b6dfb45f0a9\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"b10fdbe7-d805-4141-9968-7b6dfb45f0a9\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4d3d8385-46fb-4600-98d2-dbee35c95ab3"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"05fe593f-d37b-409f-8afc-9f8d66f786ab","username":"system:serviceaccount:llm:e2e-trlp-degraded-sa"}}} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4d3d8385-46fb-4600-98d2-dbee35c95ab3"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"05fe593f-d37b-409f-8afc-9f8d66f786ab","username":"system:serviceaccount:llm:e2e-trlp-degraded-sa"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":807449648,"seconds":1789772123}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":56556},"address":"10.133.0.10:56556"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":807449648,"seconds":1789772123},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:56556","port":56556}}} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-trlp-degraded-sa"} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b10fdbe7-d805-4141-9968-7b6dfb45f0a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:56572","PortSpecifier":{"PortValue":56572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","method":"POST","path":"/llm/e2e-trlp-test-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","object":"source:{address:{socket_address:{address:\"10.133.0.10:56572\" port_value:56572}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772123 nanos:852087654} http:{id:\"905520a3-3f89-41cf-98fc-972d68fbeeb0\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-trlp-test-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-trlp-test-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-trlp-test-model\"} headers:{key:\"x-request-id\" value:\"905520a3-3f89-41cf-98fc-972d68fbeeb0\"} path:\"/llm/e2e-trlp-test-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4zv2sDgGUVcAFG9Y_Nqohw7BhJlymC4EahCkMhcAB9fCR82v8ztenobwfz1m"} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"keyId":"8cceff3e-3dd9-40f0-8068-899650d1056e","keyName":"e2e-trlp-test-key","subscription":"e2e-trlp-degraded-sub","tenant":"models-as-a-service","userId":"8cceff3e-3dd9-40f0-8068-899650d1056e","username":"system:serviceaccount:llm:e2e-trlp-degraded-sa","valid":true}} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":false,"error":"model_unhealthy","message":"subscription rate limiting policies are not ready","phase":"Degraded","ready":false}} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","input":{"auth":{"identity":"Bearer **** rate limiting policies are not ready","phase":"Degraded","ready":false}}},"context":{"context_extensions":{"host":"bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-trlp-test-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-trlp-test-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-trlp-test-model","x-request-id":"905520a3-3f89-41cf-98fc-972d68fbeeb0"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","method":"POST","path":"/llm/e2e-trlp-test-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":852087654,"seconds":1789772123}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":56572},"address":"10.133.0.10:56572"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-trlp-test-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-trlp-test-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-trlp-test-model","x-request-id":"905520a3-3f89-41cf-98fc-972d68fbeeb0"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","method":"POST","path":"/llm/e2e-trlp-test-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":852087654,"seconds":1789772123},"url_path":"/llm/e2e-trlp-test-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:56572","port":56572}}} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-09-18T22:55:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"905520a3-3f89-41cf-98fc-972d68fbeeb0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":"model_unhealthy"}],"body":"subscription rate limiting policies are not ready"}} {"level":"info","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49846","PortSpecifier":{"PortValue":49846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","method":"POST","path":"/llm/e2e-trlp-test-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","object":"source:{address:{socket_address:{address:\"10.133.0.10:49846\" port_value:49846}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772144 nanos:951916022} http:{id:\"eb91eda8-df94-40c3-8b1c-f88a0b8afac0\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-trlp-test-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-trlp-test-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-trlp-test-model\"} headers:{key:\"x-request-id\" value:\"eb91eda8-df94-40c3-8b1c-f88a0b8afac0\"} path:\"/llm/e2e-trlp-test-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4zv2sDgGUVcAFG9Y_Nqohw7BhJlymC4EahCkMhcAB9fCR82v8ztenobwfz1m"} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"keyId":"8cceff3e-3dd9-40f0-8068-899650d1056e","keyName":"e2e-trlp-test-key","subscription":"e2e-trlp-degraded-sub","tenant":"models-as-a-service","userId":"8cceff3e-3dd9-40f0-8068-899650d1056e","username":"system:serviceaccount:llm:e2e-trlp-degraded-sa","valid":true}} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-trlp-test-model","name":"e2e-trlp-test-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-trlp-degraded-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-trlp-test-simulated"}} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-trlp-test-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-trlp-test-model","x-request-id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","method":"POST","path":"/llm/e2e-trlp-test-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":951916022,"seconds":1789772144}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":49846},"address":"10.133.0.10:49846"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-trlp-test-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-trlp-test-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-trlp-test-model","x-request-id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","method":"POST","path":"/llm/e2e-trlp-test-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":951916022,"seconds":1789772144},"url_path":"/llm/e2e-trlp-test-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:49846","port":49846}}} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:llm:e2e-trlp-degraded-sa"} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-trlp-test-key"} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-trlp-degraded-sub"} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:llm,system:authenticated","keyId":"8cceff3e-3dd9-40f0-8068-899650d1056e","keyName":"e2e-trlp-test-key","selected_subscription":"e2e-trlp-degraded-sub","selected_subscription_key":"models-as-a-service/e2e-trlp-degraded-sub@llm/e2e-trlp-test-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-trlp-test-model","name":"e2e-trlp-test-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-trlp-degraded-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-trlp-test-simulated"},"userid":"system:serviceaccount:llm:e2e-trlp-degraded-sa"}} {"level":"info","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb91eda8-df94-40c3-8b1c-f88a0b8afac0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49850","PortSpecifier":{"PortValue":49850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","method":"DELETE","path":"/maas-api/v1/api-keys/e2e-trlp-test-key","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","object":"source:{address:{socket_address:{address:\"10.133.0.10:49850\" port_value:49850}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772145 nanos:542019204} http:{id:\"15714ea4-f812-47c3-9429-7fc841c2a3b3\" method:\"DELETE\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"DELETE\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/e2e-trlp-test-key\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"0\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"15714ea4-f812-47c3-9429-7fc841c2a3b3\"} path:\"/maas-api/v1/api-keys/e2e-trlp-test-key\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e23dfcb6-f6c6-4f52-a8b5-5a08feb7affa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4f1aba06-547c-4d36-8e51-c1b2e9cba814","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e23dfcb6-f6c6-4f52-a8b5-5a08feb7affa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4f1aba06-547c-4d36-8e51-c1b2e9cba814","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e2e-trlp-test-key",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"0","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"15714ea4-f812-47c3-9429-7fc841c2a3b3"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","method":"DELETE","path":"/maas-api/v1/api-keys/e2e-trlp-test-key","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":542019204,"seconds":1789772145}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":49850},"address":"10.133.0.10:49850"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e2e-trlp-test-key",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"0","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"15714ea4-f812-47c3-9429-7fc841c2a3b3"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","method":"DELETE","path":"/maas-api/v1/api-keys/e2e-trlp-test-key","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":542019204,"seconds":1789772145},"url_path":"/maas-api/v1/api-keys/e2e-trlp-test-key","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:49850","port":49850}}} {"level":"debug","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:55:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15714ea4-f812-47c3-9429-7fc841c2a3b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47166","PortSpecifier":{"PortValue":47166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5aef51c4-8f52-452d-882e-69e1ed45857b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","object":"source:{address:{socket_address:{address:\"10.133.0.10:47166\" port_value:47166}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772153 nanos:894016978} http:{id:\"5aef51c4-8f52-452d-882e-69e1ed45857b\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"40\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"5aef51c4-8f52-452d-882e-69e1ed45857b\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55eee4c5-fbb1-4f82-950b-59bb54d74e15"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40a4bd29-46f2-40ec-85e9-6f811f0732c5","username":"system:serviceaccount:default:e2e-models-single-sub-sa"}}} {"level":"debug","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55eee4c5-fbb1-4f82-950b-59bb54d74e15"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40a4bd29-46f2-40ec-85e9-6f811f0732c5","username":"system:serviceaccount:default:e2e-models-single-sub-sa"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"40","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5aef51c4-8f52-452d-882e-69e1ed45857b"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"5aef51c4-8f52-452d-882e-69e1ed45857b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":894016978,"seconds":1789772153}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47166},"address":"10.133.0.10:47166"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"40","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5aef51c4-8f52-452d-882e-69e1ed45857b"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"5aef51c4-8f52-452d-882e-69e1ed45857b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":894016978,"seconds":1789772153},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:47166","port":47166}}} {"level":"debug","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-models-single-sub-sa"} {"level":"debug","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:55:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aef51c4-8f52-452d-882e-69e1ed45857b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47170","PortSpecifier":{"PortValue":47170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","object":"source:{address:{socket_address:{address:\"10.133.0.10:47170\" port_value:47170}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772154 nanos:37577828} http:{id:\"707e45c4-4409-4c8e-89ce-4f6172917b1b\" method:\"GET\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/models\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"707e45c4-4409-4c8e-89ce-4f6172917b1b\"} path:\"/maas-api/v1/models\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WN49s40S5mJGQXQh_6ECVOse2rBrtfDIrOIyDG3J4Ym1hc2tOaXM8sAKIqyX"} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"654941d4-9897-478a-862d-86b851aec3a0","keyName":"e2e-models-single-sub-sa-key","subscription":"e2e-single-sub-subscription","tenant":"models-as-a-service","userId":"654941d4-9897-478a-862d-86b851aec3a0","username":"system:serviceaccount:default:e2e-models-single-sub-sa","valid":true}} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"707e45c4-4409-4c8e-89ce-4f6172917b1b"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","method":"GET","path":"/maas-api/v1/models","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":37577828,"seconds":1789772154}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47170},"address":"10.133.0.10:47170"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"707e45c4-4409-4c8e-89ce-4f6172917b1b"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","method":"GET","path":"/maas-api/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":37577828,"seconds":1789772154},"url_path":"/maas-api/v1/models","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:47170","port":47170}}} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:e2e-models-single-sub-sa"} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-models-single-sub-sa-key"} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-single-sub-subscription"} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"707e45c4-4409-4c8e-89ce-4f6172917b1b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57480","PortSpecifier":{"PortValue":57480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","object":"source:{address:{socket_address:{address:\"10.133.0.10:57480\" port_value:57480}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772169 nanos:188042025} http:{id:\"fce0b7fe-9959-4589-8fff-69acc9a6c5ef\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"84\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"fce0b7fe-9959-4589-8fff-69acc9a6c5ef\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=671e3dba-0cf6-4ac3-b0c6-788cfbfff416"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9dddc432-5e75-4814-9902-2b19faf75d63","username":"system:serviceaccount:default:e2e-empty-models-sa"}}} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=671e3dba-0cf6-4ac3-b0c6-788cfbfff416"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9dddc432-5e75-4814-9902-2b19faf75d63","username":"system:serviceaccount:default:e2e-empty-models-sa"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"84","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":188042025,"seconds":1789772169}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57480},"address":"10.133.0.10:57480"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"84","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":188042025,"seconds":1789772169},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:57480","port":57480}}} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-empty-models-sa"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce0b7fe-9959-4589-8fff-69acc9a6c5ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9528e489-332b-4c40-9790-b32193a925be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57494","PortSpecifier":{"PortValue":57494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9528e489-332b-4c40-9790-b32193a925be","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9528e489-332b-4c40-9790-b32193a925be","object":"source:{address:{socket_address:{address:\"10.133.0.10:57494\" port_value:57494}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772169 nanos:231129839} http:{id:\"9528e489-332b-4c40-9790-b32193a925be\" method:\"GET\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/models\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-maas-subscription\" value:\"e2e-empty-models-subscription\"} headers:{key:\"x-request-id\" value:\"9528e489-332b-4c40-9790-b32193a925be\"} path:\"/maas-api/v1/models\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9528e489-332b-4c40-9790-b32193a925be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hMo7C2Po2BHEPZsU_4hscYTqNwn0K0xeEDLmpN1pff5XzBlnlYCgkmV2pKNK"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9528e489-332b-4c40-9790-b32193a925be","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9528e489-332b-4c40-9790-b32193a925be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"969fcfe4-a2df-479e-8604-451ea65acec1","keyName":"e2e-empty-models-sa-key","subscription":"e2e-empty-models-subscription","tenant":"models-as-a-service","userId":"969fcfe4-a2df-479e-8604-451ea65acec1","username":"system:serviceaccount:default:e2e-empty-models-sa","valid":true}} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9528e489-332b-4c40-9790-b32193a925be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-maas-subscription":"e2e-empty-models-subscription","x-request-id":"9528e489-332b-4c40-9790-b32193a925be"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"9528e489-332b-4c40-9790-b32193a925be","method":"GET","path":"/maas-api/v1/models","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":231129839,"seconds":1789772169}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57494},"address":"10.133.0.10:57494"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-maas-subscription":"e2e-empty-models-subscription","x-request-id":"9528e489-332b-4c40-9790-b32193a925be"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"9528e489-332b-4c40-9790-b32193a925be","method":"GET","path":"/maas-api/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":231129839,"seconds":1789772169},"url_path":"/maas-api/v1/models","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:57494","port":57494}}} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9528e489-332b-4c40-9790-b32193a925be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9528e489-332b-4c40-9790-b32193a925be","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9528e489-332b-4c40-9790-b32193a925be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:e2e-empty-models-sa"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9528e489-332b-4c40-9790-b32193a925be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9528e489-332b-4c40-9790-b32193a925be","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-empty-models-sa-key"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9528e489-332b-4c40-9790-b32193a925be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-empty-models-subscription"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9528e489-332b-4c40-9790-b32193a925be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9528e489-332b-4c40-9790-b32193a925be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9528e489-332b-4c40-9790-b32193a925be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37436","PortSpecifier":{"PortValue":37436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc482720-4997-4c84-ba2b-367f969d9b91","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","object":"source:{address:{socket_address:{address:\"10.133.0.10:37436\" port_value:37436}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772216 nanos:19105967} http:{id:\"fc482720-4997-4c84-ba2b-367f969d9b91\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"88\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"fc482720-4997-4c84-ba2b-367f969d9b91\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","tokenreview":{"name":""}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60050348-b9d9-4779-9eb5-b290589b2f18"]},"groups":["system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"uid":"ce70156f-162c-40d6-92b1-5221ccea87b0","username":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029"}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60050348-b9d9-4779-9eb5-b290589b2f18"]},"groups":["system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"uid":"ce70156f-162c-40d6-92b1-5221ccea87b0","username":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"88","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fc482720-4997-4c84-ba2b-367f969d9b91"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"fc482720-4997-4c84-ba2b-367f969d9b91","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":19105967,"seconds":1789772216}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37436},"address":"10.133.0.10:37436"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"88","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fc482720-4997-4c84-ba2b-367f969d9b91"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"fc482720-4997-4c84-ba2b-367f969d9b91","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":19105967,"seconds":1789772216},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:37436","port":37436}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:models-as-a-service\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc482720-4997-4c84-ba2b-367f969d9b91","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37446","PortSpecifier":{"PortValue":37446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","object":"source:{address:{socket_address:{address:\"10.133.0.10:37446\" port_value:37446}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772216 nanos:66293000} http:{id:\"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d\" method:\"GET\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/models\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d\"} path:\"/maas-api/v1/models\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GG57RDpbUkeeTL8r_GRjFSajlTpuJVt5o7951bBhER182ukHtncXV7Hsl9fi"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"keyId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","keyName":"e2e-central-exempt-3645d97e","subscription":"e2e-central-models-exempt-sub","tenant":"models-as-a-service","userId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","username":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029","valid":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","method":"GET","path":"/maas-api/v1/models","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":66293000,"seconds":1789772216}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37446},"address":"10.133.0.10:37446"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","method":"GET","path":"/maas-api/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":66293000,"seconds":1789772216},"url_path":"/maas-api/v1/models","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:37446","port":37446}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-exempt-3645d97e"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:models-as-a-service\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fddca3ad-4fc1-45b4-ab6c-4b27fc5c826d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37460","PortSpecifier":{"PortValue":37460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","object":"source:{address:{socket_address:{address:\"10.133.0.10:37460\" port_value:37460}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772216 nanos:95608358} http:{id:\"0f04d5ac-3136-4f28-bafa-ddf02605c2d4\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-unconfigured-model\"} headers:{key:\"x-request-id\" value:\"0f04d5ac-3136-4f28-bafa-ddf02605c2d4\"} path:\"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GG57RDpbUkeeTL8r_GRjFSajlTpuJVt5o7951bBhER182ukHtncXV7Hsl9fi"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"keyId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","keyName":"e2e-central-exempt-3645d97e","subscription":"e2e-central-models-exempt-sub","tenant":"models-as-a-service","userId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","username":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029","valid":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","model_name":"publishers/llm/models/test/e2e-unconfigured-model","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-unconfigured-facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","model_name":"publishers/llm/models/test/e2e-unconfigured-model","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-unconfigured-facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-unconfigured-model","x-request-id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":95608358,"seconds":1789772216}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37460},"address":"10.133.0.10:37460"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-unconfigured-model","x-request-id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":95608358,"seconds":1789772216},"url_path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:37460","port":37460}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-exempt-3645d97e"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:models-as-a-service\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:models-as-a-service,system:authenticated","keyId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","keyName":"e2e-central-exempt-3645d97e","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","model_name":"publishers/llm/models/test/e2e-unconfigured-model","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-unconfigured-facebook-opt-125m-simulated"},"userid":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029"}} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f04d5ac-3136-4f28-bafa-ddf02605c2d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37466","PortSpecifier":{"PortValue":37466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","object":"source:{address:{socket_address:{address:\"10.133.0.10:37466\" port_value:37466}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772216 nanos:137740450} http:{id:\"ace9036c-33bd-47e9-b6d0-3bd9a59ba430\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-unconfigured-model\"} headers:{key:\"x-request-id\" value:\"ace9036c-33bd-47e9-b6d0-3bd9a59ba430\"} path:\"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GG57RDpbUkeeTL8r_GRjFSajlTpuJVt5o7951bBhER182ukHtncXV7Hsl9fi"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"keyId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","keyName":"e2e-central-exempt-3645d97e","subscription":"e2e-central-models-exempt-sub","tenant":"models-as-a-service","userId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","username":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029","valid":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","model_name":"publishers/llm/models/test/e2e-unconfigured-model","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-unconfigured-facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","model_name":"publishers/llm/models/test/e2e-unconfigured-model","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-unconfigured-facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-unconfigured-model","x-request-id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":137740450,"seconds":1789772216}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37466},"address":"10.133.0.10:37466"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-unconfigured-model","x-request-id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":137740450,"seconds":1789772216},"url_path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:37466","port":37466}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-exempt-3645d97e"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:models-as-a-service\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:models-as-a-service,system:authenticated","keyId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","keyName":"e2e-central-exempt-3645d97e","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","model_name":"publishers/llm/models/test/e2e-unconfigured-model","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-unconfigured-facebook-opt-125m-simulated"},"userid":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029"}} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ace9036c-33bd-47e9-b6d0-3bd9a59ba430","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37472","PortSpecifier":{"PortValue":37472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","object":"source:{address:{socket_address:{address:\"10.133.0.10:37472\" port_value:37472}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772216 nanos:172452703} http:{id:\"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-unconfigured-model\"} headers:{key:\"x-request-id\" value:\"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f\"} path:\"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GG57RDpbUkeeTL8r_GRjFSajlTpuJVt5o7951bBhER182ukHtncXV7Hsl9fi"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"keyId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","keyName":"e2e-central-exempt-3645d97e","subscription":"e2e-central-models-exempt-sub","tenant":"models-as-a-service","userId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","username":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029","valid":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","model_name":"publishers/llm/models/test/e2e-unconfigured-model","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-unconfigured-facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","model_name":"publishers/llm/models/test/e2e-unconfigured-model","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-unconfigured-facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-unconfigured-model","x-request-id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":172452703,"seconds":1789772216}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37472},"address":"10.133.0.10:37472"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-unconfigured-model","x-request-id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":172452703,"seconds":1789772216},"url_path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:37472","port":37472}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-exempt-3645d97e"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:models-as-a-service\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:models-as-a-service,system:authenticated","keyId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","keyName":"e2e-central-exempt-3645d97e","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","model_name":"publishers/llm/models/test/e2e-unconfigured-model","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-unconfigured-facebook-opt-125m-simulated"},"userid":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029"}} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6b4c923-afd3-4fcf-98dc-eb1cecfff28f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37486","PortSpecifier":{"PortValue":37486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64d8afc9-8695-438b-a297-c66e76c4241b","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","object":"source:{address:{socket_address:{address:\"10.133.0.10:37486\" port_value:37486}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772216 nanos:216213511} http:{id:\"64d8afc9-8695-438b-a297-c66e76c4241b\" method:\"GET\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/models\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"64d8afc9-8695-438b-a297-c66e76c4241b\"} path:\"/maas-api/v1/models\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GG57RDpbUkeeTL8r_GRjFSajlTpuJVt5o7951bBhER182ukHtncXV7Hsl9fi"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"keyId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","keyName":"e2e-central-exempt-3645d97e","subscription":"e2e-central-models-exempt-sub","tenant":"models-as-a-service","userId":"c266ddc5-a354-4ec0-b655-0a01c6dc9f8c","username":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029","valid":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"64d8afc9-8695-438b-a297-c66e76c4241b"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"64d8afc9-8695-438b-a297-c66e76c4241b","method":"GET","path":"/maas-api/v1/models","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":216213511,"seconds":1789772216}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37486},"address":"10.133.0.10:37486"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"64d8afc9-8695-438b-a297-c66e76c4241b"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"64d8afc9-8695-438b-a297-c66e76c4241b","method":"GET","path":"/maas-api/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":216213511,"seconds":1789772216},"url_path":"/maas-api/v1/models","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:37486","port":37486}}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-exempt-3645d97e"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:models-as-a-service:e2e-central-models-exempt-sa-f81029"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:models-as-a-service\",\"system:authenticated\"]"} {"level":"info","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:56:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64d8afc9-8695-438b-a297-c66e76c4241b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53490","PortSpecifier":{"PortValue":53490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","object":"source:{address:{socket_address:{address:\"10.133.0.10:53490\" port_value:53490}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772223 nanos:713648609} http:{id:\"83511b6a-ca1d-42ca-a6d6-00bb523c03b2\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-embedding-simulated/v1/embeddings\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-embedding-model\"} headers:{key:\"x-request-id\" value:\"83511b6a-ca1d-42ca-a6d6-00bb523c03b2\"} path:\"/llm/e2e-embedding-simulated/v1/embeddings\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e23dfcb6-f6c6-4f52-a8b5-5a08feb7affa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4f1aba06-547c-4d36-8e51-c1b2e9cba814","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":false,"error":"not_found","message":"no matching subscription found for user","phase":"","ready":false}} {"level":"debug","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e23dfcb6-f6c6-4f52-a8b5-5a08feb7affa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4f1aba06-547c-4d36-8e51-c1b2e9cba814","username":"system:serviceaccount:default:tester-regular-user"}},"metadata":{"subscription-info":{"accessAllowed":false,"error":"not_found","message":"no matching subscription found for user","phase":"","ready":false}}},"context":{"context_extensions":{"host":"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-embedding-simulated/v1/embeddings",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":713648609,"seconds":1789772223}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53490},"address":"10.133.0.10:53490"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-embedding-simulated/v1/embeddings",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":713648609,"seconds":1789772223},"url_path":"/llm/e2e-embedding-simulated/v1/embeddings","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:53490","port":53490}}} {"level":"debug","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-09-18T22:57:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83511b6a-ca1d-42ca-a6d6-00bb523c03b2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":"not_found"}],"body":"no matching subscription found for user"}} {"level":"info","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36128","PortSpecifier":{"PortValue":36128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54af4036-d1fd-4593-b516-1a089fa1d253","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","object":"source:{address:{socket_address:{address:\"10.133.0.10:36128\" port_value:36128}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772229 nanos:761504034} http:{id:\"54af4036-d1fd-4593-b516-1a089fa1d253\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"75\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"54af4036-d1fd-4593-b516-1a089fa1d253\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","tokenreview":{"name":""}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e23dfcb6-f6c6-4f52-a8b5-5a08feb7affa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4f1aba06-547c-4d36-8e51-c1b2e9cba814","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e23dfcb6-f6c6-4f52-a8b5-5a08feb7affa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4f1aba06-547c-4d36-8e51-c1b2e9cba814","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"75","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"54af4036-d1fd-4593-b516-1a089fa1d253"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"54af4036-d1fd-4593-b516-1a089fa1d253","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":761504034,"seconds":1789772229}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36128},"address":"10.133.0.10:36128"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"75","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"54af4036-d1fd-4593-b516-1a089fa1d253"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"54af4036-d1fd-4593-b516-1a089fa1d253","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":761504034,"seconds":1789772229},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:36128","port":36128}}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54af4036-d1fd-4593-b516-1a089fa1d253","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36142","PortSpecifier":{"PortValue":36142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee24458b-5e69-473a-b289-7d1f919cddbe","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","object":"source:{address:{socket_address:{address:\"10.133.0.10:36142\" port_value:36142}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772229 nanos:809650367} http:{id:\"ee24458b-5e69-473a-b289-7d1f919cddbe\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-embedding-simulated/v1/embeddings\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-embedding-model\"} headers:{key:\"x-request-id\" value:\"ee24458b-5e69-473a-b289-7d1f919cddbe\"} path:\"/llm/e2e-embedding-simulated/v1/embeddings\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-roNkHjv1mehYysrS_iP51cpk18OVCMqk1PDgOFAYuF5i9mf3TJhPUCoRoDji"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","keyName":"e2e-emb-trlp-0b3bb737","subscription":"e2e-embedding-trlp-sub","tenant":"models-as-a-service","userId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-embedding-model","name":"e2e-embedding-simulated","source":"internal","token_rate_limits":[{"limit":5,"window":"1m"}]}],"name":"e2e-embedding-trlp-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-embedding-simulated"}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"ee24458b-5e69-473a-b289-7d1f919cddbe"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"ee24458b-5e69-473a-b289-7d1f919cddbe","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":809650367,"seconds":1789772229}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36142},"address":"10.133.0.10:36142"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-embedding-simulated/v1/embeddings",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"ee24458b-5e69-473a-b289-7d1f919cddbe"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"ee24458b-5e69-473a-b289-7d1f919cddbe","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":809650367,"seconds":1789772229},"url_path":"/llm/e2e-embedding-simulated/v1/embeddings","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:36142","port":36142}}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-embedding-trlp-sub"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-emb-trlp-0b3bb737"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","keyName":"e2e-emb-trlp-0b3bb737","selected_subscription":"e2e-embedding-trlp-sub","selected_subscription_key":"models-as-a-service/e2e-embedding-trlp-sub@llm/e2e-embedding-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-embedding-model","name":"e2e-embedding-simulated","source":"internal","token_rate_limits":[{"limit":5,"window":"1m"}]}],"name":"e2e-embedding-trlp-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-embedding-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee24458b-5e69-473a-b289-7d1f919cddbe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36154","PortSpecifier":{"PortValue":36154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c714c11-4610-4f7d-ab31-7406f627280d","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","object":"source:{address:{socket_address:{address:\"10.133.0.10:36154\" port_value:36154}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772229 nanos:964545662} http:{id:\"1c714c11-4610-4f7d-ab31-7406f627280d\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-embedding-simulated/v1/embeddings\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-embedding-model\"} headers:{key:\"x-request-id\" value:\"1c714c11-4610-4f7d-ab31-7406f627280d\"} path:\"/llm/e2e-embedding-simulated/v1/embeddings\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-roNkHjv1mehYysrS_iP51cpk18OVCMqk1PDgOFAYuF5i9mf3TJhPUCoRoDji"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","keyName":"e2e-emb-trlp-0b3bb737","subscription":"e2e-embedding-trlp-sub","tenant":"models-as-a-service","userId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-embedding-model","name":"e2e-embedding-simulated","source":"internal","token_rate_limits":[{"limit":5,"window":"1m"}]}],"name":"e2e-embedding-trlp-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-embedding-simulated"}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"1c714c11-4610-4f7d-ab31-7406f627280d"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"1c714c11-4610-4f7d-ab31-7406f627280d","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":964545662,"seconds":1789772229}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36154},"address":"10.133.0.10:36154"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-embedding-simulated/v1/embeddings",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"1c714c11-4610-4f7d-ab31-7406f627280d"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"1c714c11-4610-4f7d-ab31-7406f627280d","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":964545662,"seconds":1789772229},"url_path":"/llm/e2e-embedding-simulated/v1/embeddings","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:36154","port":36154}}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-emb-trlp-0b3bb737"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-embedding-trlp-sub"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","keyName":"e2e-emb-trlp-0b3bb737","selected_subscription":"e2e-embedding-trlp-sub","selected_subscription_key":"models-as-a-service/e2e-embedding-trlp-sub@llm/e2e-embedding-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-embedding-model","name":"e2e-embedding-simulated","source":"internal","token_rate_limits":[{"limit":5,"window":"1m"}]}],"name":"e2e-embedding-trlp-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-embedding-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:57:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c714c11-4610-4f7d-ab31-7406f627280d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36158","PortSpecifier":{"PortValue":36158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1b400c5-97fe-4e33-b273-7aa77de68779","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","object":"source:{address:{socket_address:{address:\"10.133.0.10:36158\" port_value:36158}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772230 nanos:108276270} http:{id:\"f1b400c5-97fe-4e33-b273-7aa77de68779\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-embedding-simulated/v1/embeddings\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-embedding-model\"} headers:{key:\"x-request-id\" value:\"f1b400c5-97fe-4e33-b273-7aa77de68779\"} path:\"/llm/e2e-embedding-simulated/v1/embeddings\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-roNkHjv1mehYysrS_iP51cpk18OVCMqk1PDgOFAYuF5i9mf3TJhPUCoRoDji"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","keyName":"e2e-emb-trlp-0b3bb737","subscription":"e2e-embedding-trlp-sub","tenant":"models-as-a-service","userId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-embedding-model","name":"e2e-embedding-simulated","source":"internal","token_rate_limits":[{"limit":5,"window":"1m"}]}],"name":"e2e-embedding-trlp-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-embedding-simulated"}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"f1b400c5-97fe-4e33-b273-7aa77de68779"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"f1b400c5-97fe-4e33-b273-7aa77de68779","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":108276270,"seconds":1789772230}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36158},"address":"10.133.0.10:36158"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-embedding-simulated/v1/embeddings",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"f1b400c5-97fe-4e33-b273-7aa77de68779"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"f1b400c5-97fe-4e33-b273-7aa77de68779","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":108276270,"seconds":1789772230},"url_path":"/llm/e2e-embedding-simulated/v1/embeddings","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:36158","port":36158}}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-embedding-trlp-sub"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-emb-trlp-0b3bb737"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","keyName":"e2e-emb-trlp-0b3bb737","selected_subscription":"e2e-embedding-trlp-sub","selected_subscription_key":"models-as-a-service/e2e-embedding-trlp-sub@llm/e2e-embedding-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-embedding-model","name":"e2e-embedding-simulated","source":"internal","token_rate_limits":[{"limit":5,"window":"1m"}]}],"name":"e2e-embedding-trlp-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-embedding-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1b400c5-97fe-4e33-b273-7aa77de68779","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36172","PortSpecifier":{"PortValue":36172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cda8acd3-54cc-4759-a32f-cd41726df564","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","object":"source:{address:{socket_address:{address:\"10.133.0.10:36172\" port_value:36172}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772230 nanos:248969898} http:{id:\"cda8acd3-54cc-4759-a32f-cd41726df564\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-embedding-simulated/v1/embeddings\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-embedding-model\"} headers:{key:\"x-request-id\" value:\"cda8acd3-54cc-4759-a32f-cd41726df564\"} path:\"/llm/e2e-embedding-simulated/v1/embeddings\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-roNkHjv1mehYysrS_iP51cpk18OVCMqk1PDgOFAYuF5i9mf3TJhPUCoRoDji"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","keyName":"e2e-emb-trlp-0b3bb737","subscription":"e2e-embedding-trlp-sub","tenant":"models-as-a-service","userId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-embedding-model","name":"e2e-embedding-simulated","source":"internal","token_rate_limits":[{"limit":5,"window":"1m"}]}],"name":"e2e-embedding-trlp-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-embedding-simulated"}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"cda8acd3-54cc-4759-a32f-cd41726df564"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"cda8acd3-54cc-4759-a32f-cd41726df564","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":248969898,"seconds":1789772230}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36172},"address":"10.133.0.10:36172"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-embedding-simulated/v1/embeddings",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"cda8acd3-54cc-4759-a32f-cd41726df564"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"cda8acd3-54cc-4759-a32f-cd41726df564","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":248969898,"seconds":1789772230},"url_path":"/llm/e2e-embedding-simulated/v1/embeddings","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:36172","port":36172}}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-embedding-trlp-sub"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-emb-trlp-0b3bb737"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"33ae5817-b804-46bf-8d1b-e970f8e17c7e","keyName":"e2e-emb-trlp-0b3bb737","selected_subscription":"e2e-embedding-trlp-sub","selected_subscription_key":"models-as-a-service/e2e-embedding-trlp-sub@llm/e2e-embedding-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-embedding-model","name":"e2e-embedding-simulated","source":"internal","token_rate_limits":[{"limit":5,"window":"1m"}]}],"name":"e2e-embedding-trlp-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-embedding-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cda8acd3-54cc-4759-a32f-cd41726df564","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47794","PortSpecifier":{"PortValue":47794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","object":"source:{address:{socket_address:{address:\"10.133.0.10:47794\" port_value:47794}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772242 nanos:887865714} http:{id:\"181b8fbf-6365-4696-b392-d24c85f7ffb1\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"73\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"181b8fbf-6365-4696-b392-d24c85f7ffb1\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e23dfcb6-f6c6-4f52-a8b5-5a08feb7affa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4f1aba06-547c-4d36-8e51-c1b2e9cba814","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/785e97817d07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e23dfcb6-f6c6-4f52-a8b5-5a08feb7affa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4f1aba06-547c-4d36-8e51-c1b2e9cba814","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"73","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"181b8fbf-6365-4696-b392-d24c85f7ffb1"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":887865714,"seconds":1789772242}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47794},"address":"10.133.0.10:47794"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"73","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTlwa244CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"181b8fbf-6365-4696-b392-d24c85f7ffb1"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":887865714,"seconds":1789772242},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:47794","port":47794}}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"181b8fbf-6365-4696-b392-d24c85f7ffb1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47810","PortSpecifier":{"PortValue":47810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eab13070-0a95-449a-877f-7ff4f7be66bf","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","object":"source:{address:{socket_address:{address:\"10.133.0.10:47810\" port_value:47810}}} destination:{address:{socket_address:{address:\"10.133.0.38:443\" port_value:443}}} request:{time:{seconds:1789772242 nanos:931086035} http:{id:\"eab13070-0a95-449a-877f-7ff4f7be66bf\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/e2e-embedding-simulated/v1/embeddings\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.10\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.10\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"test/e2e-embedding-model\"} headers:{key:\"x-request-id\" value:\"eab13070-0a95-449a-877f-7ff4f7be66bf\"} path:\"/llm/e2e-embedding-simulated/v1/embeddings\" host:\"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20\"} metadata_context:{}"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cgiz7ZJyBCpew7yd_KKje7IvzGByRYviaxrL55CeKJ5LpHuCtJd8PYHPliGh"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bd4ef96-644d-4d04-8db2-ec5261879d39","keyName":"e2e-emb-gov-7d401d2d","subscription":"e2e-embedding-gov-sub","tenant":"models-as-a-service","userId":"4bd4ef96-644d-4d04-8db2-ec5261879d39","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-embedding-model","name":"e2e-embedding-simulated","source":"internal","token_rate_limits":[{"limit":1000,"window":"1m"}]}],"name":"e2e-embedding-gov-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-embedding-simulated"}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"eab13070-0a95-449a-877f-7ff4f7be66bf"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"eab13070-0a95-449a-877f-7ff4f7be66bf","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":931086035,"seconds":1789772242}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47810},"address":"10.133.0.10:47810"}}}}},"destination":{"address":"10.133.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"067e39cfce6c8d069faa56a3c59b6a675990d8153e6043be4ce7e0c23fef5b20"},"headers":{":authority":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-embedding-simulated/v1/embeddings",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"e2e-embedding-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.10","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.38~maas-default-gateway-openshift-default-78bb78ff78-9pkn8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.10","x-forwarded-host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"test/e2e-embedding-model","x-request-id":"eab13070-0a95-449a-877f-7ff4f7be66bf"},"host":"maas.apps.efef5363-b638-491c-ad47-785e97817d07.prod.konfluxeaas.com","id":"eab13070-0a95-449a-877f-7ff4f7be66bf","method":"POST","path":"/llm/e2e-embedding-simulated/v1/embeddings","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":931086035,"seconds":1789772242},"url_path":"/llm/e2e-embedding-simulated/v1/embeddings","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.10:47810","port":47810}}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"deny-client-identity-headers","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{},"Right":{"Left":{},"Right":{"Left":{},"Right":{"Left":null,"Right":null}}}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata[\"subscription-info\"], \"accessAllowed\", false) == true\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"X-MaaS-KeyName","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"x-maas-keyname","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-emb-gov-7d401d2d"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-embedding-gov-sub"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bd4ef96-644d-4d04-8db2-ec5261879d39","keyName":"e2e-emb-gov-7d401d2d","selected_subscription":"e2e-embedding-gov-sub","selected_subscription_key":"models-as-a-service/e2e-embedding-gov-sub@llm/e2e-embedding-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"accessAllowed":true,"modelRefs":[{"model_name":"publishers/llm/models/test/e2e-embedding-model","name":"e2e-embedding-simulated","source":"internal","token_rate_limits":[{"limit":1000,"window":"1m"}]}],"name":"e2e-embedding-gov-sub","namespace":"models-as-a-service","phase":"Active","ready":true,"resolvedModel":"llm/e2e-embedding-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-09-18T22:57:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eab13070-0a95-449a-877f-7ff4f7be66bf","authorized":true,"response":"OK"}