{"level":"debug","ts":"2026-07-28T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e6858f5249925d58000e081c5a099fb73bd65ba449672834a0cefbd74296eea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e6858f5249925d58000e081c5a099fb73bd65ba449672834a0cefbd74296eea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36975d55289147a172eeb002e12c48bbbe9729d7719f3625d423cb059c049f58"}
{"level":"info","ts":"2026-07-28T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e6858f5249925d58000e081c5a099fb73bd65ba449672834a0cefbd74296eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82673959f9cec93f98091b2c941c6198c6f1127e62c731a5eb41535e985fa080","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:27:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:27:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82673959f9cec93f98091b2c941c6198c6f1127e62c731a5eb41535e985fa080"}
{"level":"info","ts":"2026-07-28T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82673959f9cec93f98091b2c941c6198c6f1127e62c731a5eb41535e985fa080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669423439422954c9ca7230b1fd259afaf698586774dda6b0e152c98c31cf6af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669423439422954c9ca7230b1fd259afaf698586774dda6b0e152c98c31cf6af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e6858f5249925d58000e081c5a099fb73bd65ba449672834a0cefbd74296eea"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a4c639061bfc4ee1bf97b8230f105ae59a9135d91d818fd075bfae45576e6b2"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669423439422954c9ca7230b1fd259afaf698586774dda6b0e152c98c31cf6af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab75a27cdf14ccef9db6e8fec774f526981d71d651d4a4bc0c9f146225bab1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669423439422954c9ca7230b1fd259afaf698586774dda6b0e152c98c31cf6af"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab75a27cdf14ccef9db6e8fec774f526981d71d651d4a4bc0c9f146225bab1d"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab75a27cdf14ccef9db6e8fec774f526981d71d651d4a4bc0c9f146225bab1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a4c639061bfc4ee1bf97b8230f105ae59a9135d91d818fd075bfae45576e6b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a4c639061bfc4ee1bf97b8230f105ae59a9135d91d818fd075bfae45576e6b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f59c11b8c3b4c7bd16d884d66e9a5023fb2b80d951ab8ac905b56dfe71bb18d"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea1db3ca005f8e7ef241d2f1f7cc770140f3942f0ed219c6f2ef355265a0b88"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82673959f9cec93f98091b2c941c6198c6f1127e62c731a5eb41535e985fa080"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a4c639061bfc4ee1bf97b8230f105ae59a9135d91d818fd075bfae45576e6b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f59c11b8c3b4c7bd16d884d66e9a5023fb2b80d951ab8ac905b56dfe71bb18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f59c11b8c3b4c7bd16d884d66e9a5023fb2b80d951ab8ac905b56dfe71bb18d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669423439422954c9ca7230b1fd259afaf698586774dda6b0e152c98c31cf6af"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e4835f0b467a320954cc4954e21fbd6fe21f673177550df6e7406e419f4477"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e25a35faa1d0225540e583c128bf6f8c838115e0f5490ba0e4c49604143c7a"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f59c11b8c3b4c7bd16d884d66e9a5023fb2b80d951ab8ac905b56dfe71bb18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e6858f5249925d58000e081c5a099fb73bd65ba449672834a0cefbd74296eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea1db3ca005f8e7ef241d2f1f7cc770140f3942f0ed219c6f2ef355265a0b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea1db3ca005f8e7ef241d2f1f7cc770140f3942f0ed219c6f2ef355265a0b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab75a27cdf14ccef9db6e8fec774f526981d71d651d4a4bc0c9f146225bab1d"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c040a858c6d9dd48ad1228f82306afca0eef327f8f7dbbb409da1becb4f5df32"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea1db3ca005f8e7ef241d2f1f7cc770140f3942f0ed219c6f2ef355265a0b88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82673959f9cec93f98091b2c941c6198c6f1127e62c731a5eb41535e985fa080","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82673959f9cec93f98091b2c941c6198c6f1127e62c731a5eb41535e985fa080"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c584c5f2652fd30e5c39c48549c1a2ce2c625ef3fa209e3a90fdc28dd2176c4e"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82673959f9cec93f98091b2c941c6198c6f1127e62c731a5eb41535e985fa080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669423439422954c9ca7230b1fd259afaf698586774dda6b0e152c98c31cf6af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e4835f0b467a320954cc4954e21fbd6fe21f673177550df6e7406e419f4477","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59e4835f0b467a320954cc4954e21fbd6fe21f673177550df6e7406e419f4477"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df623df63d566b1821970a15fa76b820c37a114742111068dfc6dd4c842252c0"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e4835f0b467a320954cc4954e21fbd6fe21f673177550df6e7406e419f4477","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e25a35faa1d0225540e583c128bf6f8c838115e0f5490ba0e4c49604143c7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e25a35faa1d0225540e583c128bf6f8c838115e0f5490ba0e4c49604143c7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a4c639061bfc4ee1bf97b8230f105ae59a9135d91d818fd075bfae45576e6b2"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18934a005c8335b080272a5f342b945e7800a6f3789d595ef334608651d43cb3"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f59c11b8c3b4c7bd16d884d66e9a5023fb2b80d951ab8ac905b56dfe71bb18d"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e25a35faa1d0225540e583c128bf6f8c838115e0f5490ba0e4c49604143c7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab75a27cdf14ccef9db6e8fec774f526981d71d651d4a4bc0c9f146225bab1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ab75a27cdf14ccef9db6e8fec774f526981d71d651d4a4bc0c9f146225bab1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea1db3ca005f8e7ef241d2f1f7cc770140f3942f0ed219c6f2ef355265a0b88"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82673959f9cec93f98091b2c941c6198c6f1127e62c731a5eb41535e985fa080"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab75a27cdf14ccef9db6e8fec774f526981d71d651d4a4bc0c9f146225bab1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c040a858c6d9dd48ad1228f82306afca0eef327f8f7dbbb409da1becb4f5df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c040a858c6d9dd48ad1228f82306afca0eef327f8f7dbbb409da1becb4f5df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e4835f0b467a320954cc4954e21fbd6fe21f673177550df6e7406e419f4477"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e25a35faa1d0225540e583c128bf6f8c838115e0f5490ba0e4c49604143c7a"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab75a27cdf14ccef9db6e8fec774f526981d71d651d4a4bc0c9f146225bab1d"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c040a858c6d9dd48ad1228f82306afca0eef327f8f7dbbb409da1becb4f5df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c584c5f2652fd30e5c39c48549c1a2ce2c625ef3fa209e3a90fdc28dd2176c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c584c5f2652fd30e5c39c48549c1a2ce2c625ef3fa209e3a90fdc28dd2176c4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c040a858c6d9dd48ad1228f82306afca0eef327f8f7dbbb409da1becb4f5df32"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c584c5f2652fd30e5c39c48549c1a2ce2c625ef3fa209e3a90fdc28dd2176c4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df623df63d566b1821970a15fa76b820c37a114742111068dfc6dd4c842252c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df623df63d566b1821970a15fa76b820c37a114742111068dfc6dd4c842252c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c584c5f2652fd30e5c39c48549c1a2ce2c625ef3fa209e3a90fdc28dd2176c4e"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df623df63d566b1821970a15fa76b820c37a114742111068dfc6dd4c842252c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a4c639061bfc4ee1bf97b8230f105ae59a9135d91d818fd075bfae45576e6b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18934a005c8335b080272a5f342b945e7800a6f3789d595ef334608651d43cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18934a005c8335b080272a5f342b945e7800a6f3789d595ef334608651d43cb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df623df63d566b1821970a15fa76b820c37a114742111068dfc6dd4c842252c0"}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18934a005c8335b080272a5f342b945e7800a6f3789d595ef334608651d43cb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f59c11b8c3b4c7bd16d884d66e9a5023fb2b80d951ab8ac905b56dfe71bb18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ea1db3ca005f8e7ef241d2f1f7cc770140f3942f0ed219c6f2ef355265a0b88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82673959f9cec93f98091b2c941c6198c6f1127e62c731a5eb41535e985fa080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e4835f0b467a320954cc4954e21fbd6fe21f673177550df6e7406e419f4477","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e25a35faa1d0225540e583c128bf6f8c838115e0f5490ba0e4c49604143c7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab75a27cdf14ccef9db6e8fec774f526981d71d651d4a4bc0c9f146225bab1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c040a858c6d9dd48ad1228f82306afca0eef327f8f7dbbb409da1becb4f5df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c584c5f2652fd30e5c39c48549c1a2ce2c625ef3fa209e3a90fdc28dd2176c4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df623df63d566b1821970a15fa76b820c37a114742111068dfc6dd4c842252c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18934a005c8335b080272a5f342b945e7800a6f3789d595ef334608651d43cb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18934a005c8335b080272a5f342b945e7800a6f3789d595ef334608651d43cb3"}
{"level":"info","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3b8f468-432a-4768-b93c-09352b11290c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45100","PortSpecifier":{"PortValue":45100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3b8f468-432a-4768-b93c-09352b11290c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3b8f468-432a-4768-b93c-09352b11290c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45100","PortSpecifier":{"PortValue":45100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270483,"nanos":487574885},"http":{"id":"d3b8f468-432a-4768-b93c-09352b11290c","method":"POST","headers":{":authority":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3b8f468-432a-4768-b93c-09352b11290c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3b8f468-432a-4768-b93c-09352b11290c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"]}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3b8f468-432a-4768-b93c-09352b11290c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ac1e6354c0c3fe863a656022e9293f9f671b9b904619e1e4a4d501cb4a45545"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3b8f468-432a-4768-b93c-09352b11290c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3b8f468-432a-4768-b93c-09352b11290c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3b8f468-432a-4768-b93c-09352b11290c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3b8f468-432a-4768-b93c-09352b11290c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3b8f468-432a-4768-b93c-09352b11290c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3b8f468-432a-4768-b93c-09352b11290c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3b8f468-432a-4768-b93c-09352b11290c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3b8f468-432a-4768-b93c-09352b11290c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44344","PortSpecifier":{"PortValue":44344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8189e840-18e0-43b2-a3fc-daa540b9e483","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-47f87c.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44344","PortSpecifier":{"PortValue":44344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270483,"nanos":526936601},"http":{"id":"8189e840-18e0-43b2-a3fc-daa540b9e483","method":"POST","headers":{":authority":"e2e-shared-b-47f87c.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"]}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c0fa6b76a7900b20a108316da6b7e23429e690511587d5849901498d36bca689"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.85:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-47f87c.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-47f87c/rate-test-model-47f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-47f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8189e840-18e0-43b2-a3fc-daa540b9e483","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45114","PortSpecifier":{"PortValue":45114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dde33949-ba23-43fa-9130-dcba41cfaa77","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions","host":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45114","PortSpecifier":{"PortValue":45114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270483,"nanos":564976223},"http":{"id":"dde33949-ba23-43fa-9130-dcba41cfaa77","method":"POST","headers":{":authority":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yiETtoV2cWUxjyP3_sNLhzKruISv55ZXKngEJz65rjBoCLpSjPLQXmU1gE4D"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yiETtoV2cWUxjyP3_sNLhzKruISv55ZXKngEJz65rjBoCLpSjPLQXmU1gE4D\"}"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8047a34e-aca1-400a-ac8d-83ada22af257","keyName":"e2e-rate-a-06a1e8","subscription":"e2e-rate-iso-a-06a1e8","tenant":"e2e-shared-a-a1e1ef","userId":"8047a34e-aca1-400a-ac8d-83ada22af257","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\",\"requestedSubscription\":\"e2e-rate-iso-a-06a1e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-06a1e8","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-06a1e8"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8047a34e-aca1-400a-ac8d-83ada22af257","keyName":"e2e-rate-a-06a1e8","selected_subscription":"e2e-rate-iso-a-06a1e8","selected_subscription_key":"ai-tenant-e2e-shared-a-a1e1ef/e2e-rate-iso-a-06a1e8@ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-06a1e8","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:28:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dde33949-ba23-43fa-9130-dcba41cfaa77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45122","PortSpecifier":{"PortValue":45122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions","host":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45122","PortSpecifier":{"PortValue":45122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270484,"nanos":654456012},"http":{"id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","method":"POST","headers":{":authority":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yiETtoV2cWUxjyP3_sNLhzKruISv55ZXKngEJz65rjBoCLpSjPLQXmU1gE4D"}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yiETtoV2cWUxjyP3_sNLhzKruISv55ZXKngEJz65rjBoCLpSjPLQXmU1gE4D\"}"}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8047a34e-aca1-400a-ac8d-83ada22af257","keyName":"e2e-rate-a-06a1e8","subscription":"e2e-rate-iso-a-06a1e8","tenant":"e2e-shared-a-a1e1ef","userId":"8047a34e-aca1-400a-ac8d-83ada22af257","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\",\"requestedSubscription\":\"e2e-rate-iso-a-06a1e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-06a1e8","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"}}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-06a1e8"}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8047a34e-aca1-400a-ac8d-83ada22af257","keyName":"e2e-rate-a-06a1e8","selected_subscription":"e2e-rate-iso-a-06a1e8","selected_subscription_key":"ai-tenant-e2e-shared-a-a1e1ef/e2e-rate-iso-a-06a1e8@ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-06a1e8","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:28:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f869eb6b-bd95-4a7f-b7bd-2c1632a1b6d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45124","PortSpecifier":{"PortValue":45124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions","host":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45124","PortSpecifier":{"PortValue":45124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270485,"nanos":699079645},"http":{"id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","method":"POST","headers":{":authority":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yiETtoV2cWUxjyP3_sNLhzKruISv55ZXKngEJz65rjBoCLpSjPLQXmU1gE4D"}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yiETtoV2cWUxjyP3_sNLhzKruISv55ZXKngEJz65rjBoCLpSjPLQXmU1gE4D\"}"}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8047a34e-aca1-400a-ac8d-83ada22af257","keyName":"e2e-rate-a-06a1e8","subscription":"e2e-rate-iso-a-06a1e8","tenant":"e2e-shared-a-a1e1ef","userId":"8047a34e-aca1-400a-ac8d-83ada22af257","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\",\"requestedSubscription\":\"e2e-rate-iso-a-06a1e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-06a1e8","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"}}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-06a1e8"}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8047a34e-aca1-400a-ac8d-83ada22af257","keyName":"e2e-rate-a-06a1e8","selected_subscription":"e2e-rate-iso-a-06a1e8","selected_subscription_key":"ai-tenant-e2e-shared-a-a1e1ef/e2e-rate-iso-a-06a1e8@ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-06a1e8","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:28:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae11aa6f-cb2f-450b-9adc-c4e5b92fbf8a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49680","PortSpecifier":{"PortValue":49680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49680","PortSpecifier":{"PortValue":49680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270503,"nanos":936208386},"http":{"id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","method":"POST","headers":{":authority":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"]}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ac1e6354c0c3fe863a656022e9293f9f671b9b904619e1e4a4d501cb4a45545"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f78f1cb1-197f-4067-97fc-a7d7a33d26ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45548","PortSpecifier":{"PortValue":45548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-47f87c.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45548","PortSpecifier":{"PortValue":45548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270503,"nanos":973763159},"http":{"id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","method":"POST","headers":{":authority":"e2e-shared-b-47f87c.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"]}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c0fa6b76a7900b20a108316da6b7e23429e690511587d5849901498d36bca689"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.85:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-47f87c.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-47f87c/rate-test-model-47f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-47f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdab67ad-ced7-4915-b7c8-174f0cccb365","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49694","PortSpecifier":{"PortValue":49694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions","host":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49694","PortSpecifier":{"PortValue":49694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270504,"nanos":18311514},"http":{"id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","method":"POST","headers":{":authority":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gI3PSx9qsBPCxr0t_t5vXp0XlYJIJB3EQ6KvAErdTpHwfJg2rDvz4kxwqi0Q"}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gI3PSx9qsBPCxr0t_t5vXp0XlYJIJB3EQ6KvAErdTpHwfJg2rDvz4kxwqi0Q\"}"}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f00a1d46-0ea2-4fd3-9b6b-80653545f5be","keyName":"e2e-rate-a-2630e7","subscription":"e2e-rate-iso-a-2630e7","tenant":"e2e-shared-a-a1e1ef","userId":"f00a1d46-0ea2-4fd3-9b6b-80653545f5be","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\",\"requestedSubscription\":\"e2e-rate-iso-a-2630e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2630e7","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"}}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2630e7"}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f00a1d46-0ea2-4fd3-9b6b-80653545f5be","keyName":"e2e-rate-a-2630e7","selected_subscription":"e2e-rate-iso-a-2630e7","selected_subscription_key":"ai-tenant-e2e-shared-a-a1e1ef/e2e-rate-iso-a-2630e7@ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2630e7","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e011e0ce-fd64-43fc-83f2-3c0951d7e736","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49710","PortSpecifier":{"PortValue":49710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64158be9-ba9b-4c51-8b37-11d395111b56","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions","host":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49710","PortSpecifier":{"PortValue":49710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270505,"nanos":57781903},"http":{"id":"64158be9-ba9b-4c51-8b37-11d395111b56","method":"POST","headers":{":authority":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gI3PSx9qsBPCxr0t_t5vXp0XlYJIJB3EQ6KvAErdTpHwfJg2rDvz4kxwqi0Q"}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gI3PSx9qsBPCxr0t_t5vXp0XlYJIJB3EQ6KvAErdTpHwfJg2rDvz4kxwqi0Q\"}"}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f00a1d46-0ea2-4fd3-9b6b-80653545f5be","keyName":"e2e-rate-a-2630e7","subscription":"e2e-rate-iso-a-2630e7","tenant":"e2e-shared-a-a1e1ef","userId":"f00a1d46-0ea2-4fd3-9b6b-80653545f5be","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\",\"requestedSubscription\":\"e2e-rate-iso-a-2630e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2630e7","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"}}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2630e7"}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f00a1d46-0ea2-4fd3-9b6b-80653545f5be","keyName":"e2e-rate-a-2630e7","selected_subscription":"e2e-rate-iso-a-2630e7","selected_subscription_key":"ai-tenant-e2e-shared-a-a1e1ef/e2e-rate-iso-a-2630e7@ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2630e7","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:28:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64158be9-ba9b-4c51-8b37-11d395111b56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49716","PortSpecifier":{"PortValue":49716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions","host":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49716","PortSpecifier":{"PortValue":49716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270506,"nanos":94928643},"http":{"id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","method":"POST","headers":{":authority":"e2e-shared-a-a1e1ef.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gI3PSx9qsBPCxr0t_t5vXp0XlYJIJB3EQ6KvAErdTpHwfJg2rDvz4kxwqi0Q"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gI3PSx9qsBPCxr0t_t5vXp0XlYJIJB3EQ6KvAErdTpHwfJg2rDvz4kxwqi0Q\"}"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f00a1d46-0ea2-4fd3-9b6b-80653545f5be","keyName":"e2e-rate-a-2630e7","subscription":"e2e-rate-iso-a-2630e7","tenant":"e2e-shared-a-a1e1ef","userId":"f00a1d46-0ea2-4fd3-9b6b-80653545f5be","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\",\"requestedSubscription\":\"e2e-rate-iso-a-2630e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e1ef.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2630e7","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2630e7"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f00a1d46-0ea2-4fd3-9b6b-80653545f5be","keyName":"e2e-rate-a-2630e7","selected_subscription":"e2e-rate-iso-a-2630e7","selected_subscription_key":"ai-tenant-e2e-shared-a-a1e1ef/e2e-rate-iso-a-2630e7@ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e1ef/models/facebook/opt-125m","name":"rate-test-model-a1e1ef","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2630e7","namespace":"ai-tenant-e2e-shared-a-a1e1ef","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e1ef/rate-test-model-a1e1ef"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02d25652-9ba0-4c1a-9ce7-650a3acc6e7f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45564","PortSpecifier":{"PortValue":45564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","method":"POST","path":"/ai-tenant-e2e-shared-b-47f87c/rate-test-model-47f87c/v1/completions","host":"e2e-shared-b-47f87c.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45564","PortSpecifier":{"PortValue":45564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270506,"nanos":135363621},"http":{"id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","method":"POST","headers":{":authority":"e2e-shared-b-47f87c.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-47f87c/rate-test-model-47f87c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DwcMzXyAVwgElmCG_9kEs170xcIgZFtqzQGpTfHnXxF46N53Ov5fCruXfiC"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-47f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DwcMzXyAVwgElmCG_9kEs170xcIgZFtqzQGpTfHnXxF46N53Ov5fCruXfiC\"}"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-47f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62b5ca78-b8b1-43b5-899e-3fef570de109","keyName":"e2e-rate-b-2630e7","subscription":"e2e-rate-iso-b-2630e7","tenant":"e2e-shared-b-47f87c","userId":"62b5ca78-b8b1-43b5-899e-3fef570de109","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-47f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-47f87c/rate-test-model-47f87c\",\"requestedSubscription\":\"e2e-rate-iso-b-2630e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-47f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-47f87c/models/facebook/opt-125m","name":"rate-test-model-47f87c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-2630e7","namespace":"ai-tenant-e2e-shared-b-47f87c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-47f87c/rate-test-model-47f87c"}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-47f87c/rate-test-model-47f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-47f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-2630e7"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62b5ca78-b8b1-43b5-899e-3fef570de109","keyName":"e2e-rate-b-2630e7","selected_subscription":"e2e-rate-iso-b-2630e7","selected_subscription_key":"ai-tenant-e2e-shared-b-47f87c/e2e-rate-iso-b-2630e7@ai-tenant-e2e-shared-b-47f87c/rate-test-model-47f87c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-47f87c/models/facebook/opt-125m","name":"rate-test-model-47f87c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-2630e7","namespace":"ai-tenant-e2e-shared-b-47f87c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-47f87c/rate-test-model-47f87c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:28:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"070e6ab0-f9eb-46fd-a03e-4f848fc79d77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c01ca9b28cca3f870cb1ebc32ebbafb729d6dd9b0eeb0a6e10dfe4c7615867a"}
{"level":"info","ts":"2026-07-28T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcb6597787a7f791aa01f8a747f9c9cd5c17ee703c57134c3af5b22ff28a0891"}
{"level":"info","ts":"2026-07-28T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cb1098f281f28933f7e3728b7af47d99968093b1cb499b8633883d26be0ddd2"}
{"level":"info","ts":"2026-07-28T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60674628f73dc020bbf09120627380d438466f95721e204b03bcd7f742030b4c"}
{"level":"info","ts":"2026-07-28T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ab75a27cdf14ccef9db6e8fec774f526981d71d651d4a4bc0c9f146225bab1d"}
{"level":"info","ts":"2026-07-28T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c040a858c6d9dd48ad1228f82306afca0eef327f8f7dbbb409da1becb4f5df32"}
{"level":"info","ts":"2026-07-28T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79e25a35faa1d0225540e583c128bf6f8c838115e0f5490ba0e4c49604143c7a"}
{"level":"info","ts":"2026-07-28T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ebb4a11d3873e97cbb6d62dc002fe0a4ae146c8a505d3f37519c386f8c9afef"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669423439422954c9ca7230b1fd259afaf698586774dda6b0e152c98c31cf6af"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36975d55289147a172eeb002e12c48bbbe9729d7719f3625d423cb059c049f58"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/656421c0777216c318b9eed88444657cfd1c3de9d73f692c4b1e02ad0a5d6bfb"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f7ffaa746839ba37a0fb33cd64be0ebc4c7819c67f38fe597ab8c7e72282e91"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a4c639061bfc4ee1bf97b8230f105ae59a9135d91d818fd075bfae45576e6b2"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0fa6b76a7900b20a108316da6b7e23429e690511587d5849901498d36bca689"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ea1db3ca005f8e7ef241d2f1f7cc770140f3942f0ed219c6f2ef355265a0b88"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18934a005c8335b080272a5f342b945e7800a6f3789d595ef334608651d43cb3"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82673959f9cec93f98091b2c941c6198c6f1127e62c731a5eb41535e985fa080"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59e4835f0b467a320954cc4954e21fbd6fe21f673177550df6e7406e419f4477"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c584c5f2652fd30e5c39c48549c1a2ce2c625ef3fa209e3a90fdc28dd2176c4e"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df623df63d566b1821970a15fa76b820c37a114742111068dfc6dd4c842252c0"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0107a308f745021844917c8445a04bcf20ad729dc482aa2b87dd7d5b1db890db"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f59c11b8c3b4c7bd16d884d66e9a5023fb2b80d951ab8ac905b56dfe71bb18d"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ac1e6354c0c3fe863a656022e9293f9f671b9b904619e1e4a4d501cb4a45545"}
{"level":"info","ts":"2026-07-28T20:28:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e6858f5249925d58000e081c5a099fb73bd65ba449672834a0cefbd74296eea"}
{"level":"info","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:52092","PortSpecifier":{"PortValue":52092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a0c0532-73b0-4522-abf2-12927df484b2","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:52092","PortSpecifier":{"PortValue":52092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270595,"nanos":368385588},"http":{"id":"9a0c0532-73b0-4522-abf2-12927df484b2","method":"POST","headers":{":authority":"maas.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"]}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a0c0532-73b0-4522-abf2-12927df484b2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:52104","PortSpecifier":{"PortValue":52104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:52104","PortSpecifier":{"PortValue":52104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270595,"nanos":416164230},"http":{"id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","method":"POST","headers":{":authority":"maas.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CTpqfDX3UsZg3gzK_YmECiQHhQNfkiBnUGGe3aRRFts4O5l0W677c5xF2HVw"}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CTpqfDX3UsZg3gzK_YmECiQHhQNfkiBnUGGe3aRRFts4O5l0W677c5xF2HVw\"}"}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"668a8b91-38ce-4ea8-b947-81275ac085ab","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"668a8b91-38ce-4ea8-b947-81275ac085ab","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"668a8b91-38ce-4ea8-b947-81275ac085ab","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:29:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16403bd7-2509-4b7a-9c1a-74a4502e2f66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a"}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a"}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6"}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a"}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6"}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6"}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0"}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0"}
{"level":"debug","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0"}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0"}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a61379143cca35e11c45362e5b67e4392a727d0cf230b1ff51a9502b1ca80065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a61379143cca35e11c45362e5b67e4392a727d0cf230b1ff51a9502b1ca80065"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a61379143cca35e11c45362e5b67e4392a727d0cf230b1ff51a9502b1ca80065","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a61379143cca35e11c45362e5b67e4392a727d0cf230b1ff51a9502b1ca80065"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a61379143cca35e11c45362e5b67e4392a727d0cf230b1ff51a9502b1ca80065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a61379143cca35e11c45362e5b67e4392a727d0cf230b1ff51a9502b1ca80065"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a61379143cca35e11c45362e5b67e4392a727d0cf230b1ff51a9502b1ca80065","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a61379143cca35e11c45362e5b67e4392a727d0cf230b1ff51a9502b1ca80065"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a61379143cca35e11c45362e5b67e4392a727d0cf230b1ff51a9502b1ca80065","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116305bf7e5058506d48cf3d36c45bcecd06d1748b423f5683c897b35982ae4f"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116305bf7e5058506d48cf3d36c45bcecd06d1748b423f5683c897b35982ae4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["116305bf7e5058506d48cf3d36c45bcecd06d1748b423f5683c897b35982ae4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116305bf7e5058506d48cf3d36c45bcecd06d1748b423f5683c897b35982ae4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116305bf7e5058506d48cf3d36c45bcecd06d1748b423f5683c897b35982ae4f"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116305bf7e5058506d48cf3d36c45bcecd06d1748b423f5683c897b35982ae4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb85c822759968267764e95cef8b3dda86ea07b1cb57519fc42a809f71e942a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb85c822759968267764e95cef8b3dda86ea07b1cb57519fc42a809f71e942a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb85c822759968267764e95cef8b3dda86ea07b1cb57519fc42a809f71e942a"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7886369512ec3deb7cfc16be2b5aba12b5edc10fa8cc31c88b31f3eeffd47365","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7886369512ec3deb7cfc16be2b5aba12b5edc10fa8cc31c88b31f3eeffd47365"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7886369512ec3deb7cfc16be2b5aba12b5edc10fa8cc31c88b31f3eeffd47365","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb85c822759968267764e95cef8b3dda86ea07b1cb57519fc42a809f71e942a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbb85c822759968267764e95cef8b3dda86ea07b1cb57519fc42a809f71e942a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb85c822759968267764e95cef8b3dda86ea07b1cb57519fc42a809f71e942a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7886369512ec3deb7cfc16be2b5aba12b5edc10fa8cc31c88b31f3eeffd47365","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7886369512ec3deb7cfc16be2b5aba12b5edc10fa8cc31c88b31f3eeffd47365"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7886369512ec3deb7cfc16be2b5aba12b5edc10fa8cc31c88b31f3eeffd47365","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7886369512ec3deb7cfc16be2b5aba12b5edc10fa8cc31c88b31f3eeffd47365"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376"}
{"level":"info","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbb85c822759968267764e95cef8b3dda86ea07b1cb57519fc42a809f71e942a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T20:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef"}
{"level":"info","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7886369512ec3deb7cfc16be2b5aba12b5edc10fa8cc31c88b31f3eeffd47365","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb85c822759968267764e95cef8b3dda86ea07b1cb57519fc42a809f71e942a"}
{"level":"info","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7886369512ec3deb7cfc16be2b5aba12b5edc10fa8cc31c88b31f3eeffd47365"}
{"level":"info","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93"}
{"level":"info","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376"}
{"level":"info","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef"}
{"level":"info","ts":"2026-07-28T20:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d"}
{"level":"info","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41630","PortSpecifier":{"PortValue":41630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a6009e0-624a-43c1-9959-f84d7a31f347","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-aa68dd.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41630","PortSpecifier":{"PortValue":41630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270650,"nanos":576032355},"http":{"id":"8a6009e0-624a-43c1-9959-f84d7a31f347","method":"POST","headers":{":authority":"e2e-ipp-a-aa68dd.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"]}}
{"level":"debug","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/32f68d892ff6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2f2bd75-a001-49f4-ab1c-f4c86b3003ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"44ffe30c-66b3-45b0-b7b5-5ad6ce9466fb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61379143cca35e11c45362e5b67e4392a727d0cf230b1ff51a9502b1ca80065"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-aa68dd.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-aa68dd/ipp-route-aa68dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-aa68dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a6009e0-624a-43c1-9959-f84d7a31f347","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41642","PortSpecifier":{"PortValue":41642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0caecb50-279e-4772-a0ce-b417fdc71533","method":"POST","path":"/ai-tenant-e2e-ipp-a-aa68dd/ipp-route-aa68dd/v1/chat/completions","host":"e2e-ipp-a-aa68dd.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41642","PortSpecifier":{"PortValue":41642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785270652,"nanos":631136753},"http":{"id":"0caecb50-279e-4772-a0ce-b417fdc71533","method":"POST","headers":{":authority":"e2e-ipp-a-aa68dd.apps.6d285eef-f89b-4d9b-910d-32f68d892ff6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-aa68dd/ipp-route-aa68dd/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OsRdwq0GsHhTELMI_mm6LoJDKvpGu2Kd8sXc1n3uOjO0haqZGVQsgwnfTDak"}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-aa68dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OsRdwq0GsHhTELMI_mm6LoJDKvpGu2Kd8sXc1n3uOjO0haqZGVQsgwnfTDak\"}"}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-aa68dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1753300b-4e6b-44fd-bcd1-b7dcbd667cb0","keyName":"e2e-ipp-aa68dd","subscription":"ipp-route-aa68dd-sub","tenant":"e2e-ipp-a-aa68dd","userId":"1753300b-4e6b-44fd-bcd1-b7dcbd667cb0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-aa68dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-aa68dd/ipp-route-aa68dd\",\"requestedSubscription\":\"ipp-route-aa68dd-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-aa68dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-aa68dd/models/facebook/opt-125m","name":"ipp-route-aa68dd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-aa68dd-sub","namespace":"ai-tenant-e2e-ipp-a-aa68dd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-aa68dd/ipp-route-aa68dd"}}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-aa68dd/ipp-route-aa68dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-aa68dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-aa68dd-sub"}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1753300b-4e6b-44fd-bcd1-b7dcbd667cb0","keyName":"e2e-ipp-aa68dd","selected_subscription":"ipp-route-aa68dd-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-aa68dd/ipp-route-aa68dd-sub@ai-tenant-e2e-ipp-a-aa68dd/ipp-route-aa68dd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-aa68dd/models/facebook/opt-125m","name":"ipp-route-aa68dd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-aa68dd-sub","namespace":"ai-tenant-e2e-ipp-a-aa68dd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-aa68dd/ipp-route-aa68dd"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T20:30:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0caecb50-279e-4772-a0ce-b417fdc71533","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T20:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbb85c822759968267764e95cef8b3dda86ea07b1cb57519fc42a809f71e942a"}
{"level":"info","ts":"2026-07-28T20:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c1d0ae8de654b5dae10ad9f1f7d2a7f2893f0b1c603cb42c8b539d0245573f0"}
{"level":"info","ts":"2026-07-28T20:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d1c7be7a1c4b7f99e5da3c822435a10eee0d805cae3ff8e1a0f5df7eaaf27f6"}
{"level":"info","ts":"2026-07-28T20:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a61379143cca35e11c45362e5b67e4392a727d0cf230b1ff51a9502b1ca80065"}
{"level":"info","ts":"2026-07-28T20:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/116305bf7e5058506d48cf3d36c45bcecd06d1748b423f5683c897b35982ae4f"}
{"level":"info","ts":"2026-07-28T20:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7886369512ec3deb7cfc16be2b5aba12b5edc10fa8cc31c88b31f3eeffd47365"}
{"level":"info","ts":"2026-07-28T20:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e472139ad7320d7b4eb8cbb014c5dd7bb0b87646daa952355ec56626daa04d93"}
{"level":"info","ts":"2026-07-28T20:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18c1e4092c4f0450bc94cedb17b01e52796c96666d7fa7218c2183eec0ee2376"}
{"level":"info","ts":"2026-07-28T20:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/501d8a146da82d0ce07004a5aff0c5c36b589575cd0cd337dc44ac964357afef"}
{"level":"info","ts":"2026-07-28T20:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a22343ab251b312f780b529750d19a7c364ffc70beb900e592e76c6c174b3b3d"}
{"level":"info","ts":"2026-07-28T20:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e6054e963546b7dd08cd76ebd948b27192e7592c5b926df94e955ea54d2923a"}
{"level":"info","ts":"2026-07-28T20:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f8f3eb2538726ebb3f73cf8cf18b2173ac781f41af7c0f99667d1fa4029b79a"}