{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43296","PortSpecifier":{"PortValue":43296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e906215f-436c-4edf-8164-b9ddd2cf048c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43296","PortSpecifier":{"PortValue":43296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580248,"nanos":944742881},"http":{"id":"e906215f-436c-4edf-8164-b9ddd2cf048c","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41830","PortSpecifier":{"PortValue":41830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11a98acf-d239-41c0-8044-cb710a6652c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41830","PortSpecifier":{"PortValue":41830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580248,"nanos":987753411},"http":{"id":"11a98acf-d239-41c0-8044-cb710a6652c4","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"756b0834-02e7-4035-9f3b-31536622a520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43310","PortSpecifier":{"PortValue":43310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"756b0834-02e7-4035-9f3b-31536622a520","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"756b0834-02e7-4035-9f3b-31536622a520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43310","PortSpecifier":{"PortValue":43310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580249,"nanos":29280874},"http":{"id":"756b0834-02e7-4035-9f3b-31536622a520","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"756b0834-02e7-4035-9f3b-31536622a520","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"756b0834-02e7-4035-9f3b-31536622a520","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"756b0834-02e7-4035-9f3b-31536622a520","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43326","PortSpecifier":{"PortValue":43326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43326","PortSpecifier":{"PortValue":43326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580250,"nanos":92139549},"http":{"id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43334","PortSpecifier":{"PortValue":43334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7eee8fc3-d725-4538-bcc8-59607b625822","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43334","PortSpecifier":{"PortValue":43334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580251,"nanos":140124380},"http":{"id":"7eee8fc3-d725-4538-bcc8-59607b625822","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43346","PortSpecifier":{"PortValue":43346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43346","PortSpecifier":{"PortValue":43346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580252,"nanos":175397966},"http":{"id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43348","PortSpecifier":{"PortValue":43348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43348","PortSpecifier":{"PortValue":43348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580253,"nanos":214123702},"http":{"id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50296","PortSpecifier":{"PortValue":50296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50296","PortSpecifier":{"PortValue":50296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580254,"nanos":254522162},"http":{"id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50298","PortSpecifier":{"PortValue":50298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50298","PortSpecifier":{"PortValue":50298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580255,"nanos":289313823},"http":{"id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"332359ef-aa96-427a-b33f-983096643ae5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50302","PortSpecifier":{"PortValue":50302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"332359ef-aa96-427a-b33f-983096643ae5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"332359ef-aa96-427a-b33f-983096643ae5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50302","PortSpecifier":{"PortValue":50302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580263,"nanos":945037463},"http":{"id":"332359ef-aa96-427a-b33f-983096643ae5","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"332359ef-aa96-427a-b33f-983096643ae5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"332359ef-aa96-427a-b33f-983096643ae5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"332359ef-aa96-427a-b33f-983096643ae5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"332359ef-aa96-427a-b33f-983096643ae5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59084","PortSpecifier":{"PortValue":59084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59084","PortSpecifier":{"PortValue":59084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580264,"nanos":5170966},"http":{"id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50316","PortSpecifier":{"PortValue":50316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50316","PortSpecifier":{"PortValue":50316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580264,"nanos":43808466},"http":{"id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM\"}"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","subscription":"e2e-rate-iso-a-9dd611","tenant":"e2e-shared-a-b15c6d","userId":"dfaf9e4d-883c-4f47-b524-7429938b583e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-9dd611\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9dd611"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","selected_subscription":"e2e-rate-iso-a-9dd611","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-9dd611@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51982","PortSpecifier":{"PortValue":51982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"955437c5-c2f8-45b0-b288-8a404eedd261","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51982","PortSpecifier":{"PortValue":51982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580265,"nanos":83124603},"http":{"id":"955437c5-c2f8-45b0-b288-8a404eedd261","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM\"}"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","subscription":"e2e-rate-iso-a-9dd611","tenant":"e2e-shared-a-b15c6d","userId":"dfaf9e4d-883c-4f47-b524-7429938b583e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-9dd611\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9dd611"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","selected_subscription":"e2e-rate-iso-a-9dd611","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-9dd611@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"358e387c-07df-47f2-ad24-3af546de790f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51994","PortSpecifier":{"PortValue":51994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"358e387c-07df-47f2-ad24-3af546de790f","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"358e387c-07df-47f2-ad24-3af546de790f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51994","PortSpecifier":{"PortValue":51994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580266,"nanos":141216637},"http":{"id":"358e387c-07df-47f2-ad24-3af546de790f","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM\"}"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","subscription":"e2e-rate-iso-a-9dd611","tenant":"e2e-shared-a-b15c6d","userId":"dfaf9e4d-883c-4f47-b524-7429938b583e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-9dd611\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"358e387c-07df-47f2-ad24-3af546de790f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9dd611"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","selected_subscription":"e2e-rate-iso-a-9dd611","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-9dd611@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"358e387c-07df-47f2-ad24-3af546de790f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"358e387c-07df-47f2-ad24-3af546de790f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54998","PortSpecifier":{"PortValue":54998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","method":"POST","path":"/ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f/v1/completions","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54998","PortSpecifier":{"PortValue":54998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580266,"nanos":188697349},"http":{"id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5PERia7MBjztn3xK_fOlQ6HrZlvqVCzZza7gPP5PkHi8Oc98aIC0tNUJsBnK"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5PERia7MBjztn3xK_fOlQ6HrZlvqVCzZza7gPP5PkHi8Oc98aIC0tNUJsBnK\"}"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"461e2656-f43d-4618-9f5f-72f68e7001eb","keyName":"e2e-rate-b-9dd611","subscription":"e2e-rate-iso-b-9dd611","tenant":"e2e-shared-b-40065f","userId":"461e2656-f43d-4618-9f5f-72f68e7001eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f\",\"requestedSubscription\":\"e2e-rate-iso-b-9dd611\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-40065f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9dd611","namespace":"ai-tenant-e2e-shared-b-40065f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f"}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9dd611"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"461e2656-f43d-4618-9f5f-72f68e7001eb","keyName":"e2e-rate-b-9dd611","selected_subscription":"e2e-rate-iso-b-9dd611","selected_subscription_key":"ai-tenant-e2e-shared-b-40065f/e2e-rate-iso-b-9dd611@ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-40065f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9dd611","namespace":"ai-tenant-e2e-shared-b-40065f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/928863c1a63f0393ff83f2aa7711b5396a19f66c29c96f31370f89eaddd3ea9c"}
{"level":"info","ts":"2026-07-20T20:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de"}
{"level":"info","ts":"2026-07-20T20:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7"}
{"level":"info","ts":"2026-07-20T20:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/314f630bed31d8488564398b48ca91e7a1e8e6ae0d18ff81896752f8f542b7ee"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"}