{"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8ee95ec91fbcdc938df1bb67c35e6d0ca6dc6d5463452dbabc4f6d0c304f86e"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8ee95ec91fbcdc938df1bb67c35e6d0ca6dc6d5463452dbabc4f6d0c304f86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e"} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8ee95ec91fbcdc938df1bb67c35e6d0ca6dc6d5463452dbabc4f6d0c304f86e"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e"} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e"} {"level":"error","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e47686f79ed74ba5126b89013e43c471e80b4d97b6c999b2f4107c19cc345a17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e47686f79ed74ba5126b89013e43c471e80b4d97b6c999b2f4107c19cc345a17"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e47686f79ed74ba5126b89013e43c471e80b4d97b6c999b2f4107c19cc345a17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48fe7802ed76ac7aa46489506810da6ce9bd050d0871e6d2a86300e84d346367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48fe7802ed76ac7aa46489506810da6ce9bd050d0871e6d2a86300e84d346367","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48fe7802ed76ac7aa46489506810da6ce9bd050d0871e6d2a86300e84d346367"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e47686f79ed74ba5126b89013e43c471e80b4d97b6c999b2f4107c19cc345a17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e47686f79ed74ba5126b89013e43c471e80b4d97b6c999b2f4107c19cc345a17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e47686f79ed74ba5126b89013e43c471e80b4d97b6c999b2f4107c19cc345a17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48fe7802ed76ac7aa46489506810da6ce9bd050d0871e6d2a86300e84d346367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48fe7802ed76ac7aa46489506810da6ce9bd050d0871e6d2a86300e84d346367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e47686f79ed74ba5126b89013e43c471e80b4d97b6c999b2f4107c19cc345a17"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48fe7802ed76ac7aa46489506810da6ce9bd050d0871e6d2a86300e84d346367","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e47686f79ed74ba5126b89013e43c471e80b4d97b6c999b2f4107c19cc345a17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48fe7802ed76ac7aa46489506810da6ce9bd050d0871e6d2a86300e84d346367"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48fe7802ed76ac7aa46489506810da6ce9bd050d0871e6d2a86300e84d346367","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc"} {"level":"info","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e"} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81"} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c"} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc"} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81"} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c"} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc"} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81"} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c"} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc"} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc"} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c"} {"level":"info","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:51476","PortSpecifier":{"PortValue":51476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","object":"source:{address:{socket_address:{address:\"10.134.0.12:51476\" port_value:51476}}} destination:{address:{socket_address:{address:\"10.132.0.81:443\" port_value:443}}} request:{time:{seconds:1785951237 nanos:669578030} http:{id:\"8e1fc254-0dc5-452e-8598-9cc5e4b21d11\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"8e1fc254-0dc5-452e-8598-9cc5e4b21d11\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"e3c5df7e4b364ab97db5fb738d52f8c0f9c7acd388eb2fbd8d2d5ff5e31eb240\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/00f65853d772"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=88c11bf7-566e-42d5-9316-c1b8c1117b7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b4018a-9cf7-42cf-83a7-349f19ba230c","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/00f65853d772"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=88c11bf7-566e-42d5-9316-c1b8c1117b7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b4018a-9cf7-42cf-83a7-349f19ba230c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e3c5df7e4b364ab97db5fb738d52f8c0f9c7acd388eb2fbd8d2d5ff5e31eb240"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11"},"host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":669578030,"seconds":1785951237}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51476},"address":"10.134.0.12:51476"}}}}},"destination":{"address":"10.132.0.81:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"e3c5df7e4b364ab97db5fb738d52f8c0f9c7acd388eb2fbd8d2d5ff5e31eb240"},"headers":{":authority":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11"},"host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":669578030,"seconds":1785951237},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:51476","port":51476}}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e09f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e1fc254-0dc5-452e-8598-9cc5e4b21d11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"653ed635-81e9-4092-93dc-45baf52df5df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58282","PortSpecifier":{"PortValue":58282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"653ed635-81e9-4092-93dc-45baf52df5df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"653ed635-81e9-4092-93dc-45baf52df5df","object":"source:{address:{socket_address:{address:\"10.134.0.12:58282\" port_value:58282}}} destination:{address:{socket_address:{address:\"10.132.0.82:443\" port_value:443}}} request:{time:{seconds:1785951237 nanos:706616192} http:{id:\"653ed635-81e9-4092-93dc-45baf52df5df\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-a81ee3.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1hODFlZTMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWE4MWVlMy1vcGVuc2hpZnQtZGVmYXVsdC01Y2Q2Y2Y2NTY4LXZrbG54CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWE4MWVlMy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1hODFlZTMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.82~e2e-shared-b-a81ee3-openshift-default-5cd6cf6568-vklnx.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"653ed635-81e9-4092-93dc-45baf52df5df\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"653ed635-81e9-4092-93dc-45baf52df5df","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"653ed635-81e9-4092-93dc-45baf52df5df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/00f65853d772"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=88c11bf7-566e-42d5-9316-c1b8c1117b7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b4018a-9cf7-42cf-83a7-349f19ba230c","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"653ed635-81e9-4092-93dc-45baf52df5df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/00f65853d772"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=88c11bf7-566e-42d5-9316-c1b8c1117b7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b4018a-9cf7-42cf-83a7-349f19ba230c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-a81ee3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1hODFlZTMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWE4MWVlMy1vcGVuc2hpZnQtZGVmYXVsdC01Y2Q2Y2Y2NTY4LXZrbG54CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWE4MWVlMy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1hODFlZTMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.82~e2e-shared-b-a81ee3-openshift-default-5cd6cf6568-vklnx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"653ed635-81e9-4092-93dc-45baf52df5df"},"host":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"653ed635-81e9-4092-93dc-45baf52df5df","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":706616192,"seconds":1785951237}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58282},"address":"10.134.0.12:58282"}}}}},"destination":{"address":"10.132.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e"},"headers":{":authority":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-a81ee3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.82~e2e-shared-b-a81ee3-openshift-default-5cd6cf6568-vklnx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"653ed635-81e9-4092-93dc-45baf52df5df"},"host":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"653ed635-81e9-4092-93dc-45baf52df5df","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":706616192,"seconds":1785951237},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:58282","port":58282}}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653ed635-81e9-4092-93dc-45baf52df5df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653ed635-81e9-4092-93dc-45baf52df5df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653ed635-81e9-4092-93dc-45baf52df5df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a81ee3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"653ed635-81e9-4092-93dc-45baf52df5df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653ed635-81e9-4092-93dc-45baf52df5df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653ed635-81e9-4092-93dc-45baf52df5df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"653ed635-81e9-4092-93dc-45baf52df5df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"653ed635-81e9-4092-93dc-45baf52df5df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:51480","PortSpecifier":{"PortValue":51480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","object":"source:{address:{socket_address:{address:\"10.134.0.12:51480\" port_value:51480}}} destination:{address:{socket_address:{address:\"10.132.0.81:443\" port_value:443}}} request:{time:{seconds:1785951237 nanos:742762993} http:{id:\"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a1e09f-kserve-workload-svc.ai-tenant-e2e-shared-a-a1e09f.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd\"} path:\"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions\" host:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"96a1a60f1a5bc977f2e0b3da74c4d4320533a9a18620de8cdf68cf939943eb93\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZnFdpSUuqgyPRYNo_fDBXaLPNtyp5sn3X1gEtrG0hjFnmumcccDdzHenJ7dm"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4444ebf3-fb08-40ae-bc32-805da6741a4e","keyName":"e2e-rate-a-a48705","subscription":"e2e-rate-iso-a-a48705","tenant":"e2e-shared-a-a1e09f","userId":"4444ebf3-fb08-40ae-bc32-805da6741a4e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e09f/models/facebook/opt-125m","name":"rate-test-model-a1e09f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a48705","namespace":"ai-tenant-e2e-shared-a-a1e09f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f"}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a1e09f-kserve-workload-svc.ai-tenant-e2e-shared-a-a1e09f.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd"},"host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":742762993,"seconds":1785951237}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51480},"address":"10.134.0.12:51480"}}}}},"destination":{"address":"10.132.0.81:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"96a1a60f1a5bc977f2e0b3da74c4d4320533a9a18620de8cdf68cf939943eb93"},"headers":{":authority":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a1e09f-kserve-workload-svc.ai-tenant-e2e-shared-a-a1e09f.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd"},"host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":742762993,"seconds":1785951237},"url_path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:51480","port":51480}}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e09f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a48705"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4444ebf3-fb08-40ae-bc32-805da6741a4e","keyName":"e2e-rate-a-a48705","selected_subscription":"e2e-rate-iso-a-a48705","selected_subscription_key":"ai-tenant-e2e-shared-a-a1e09f/e2e-rate-iso-a-a48705@ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e09f/models/facebook/opt-125m","name":"rate-test-model-a1e09f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a48705","namespace":"ai-tenant-e2e-shared-a-a1e09f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T17:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dd9ae1e-dad5-4f70-aeb9-ecdf0b4e54fd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:51484","PortSpecifier":{"PortValue":51484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","object":"source:{address:{socket_address:{address:\"10.134.0.12:51484\" port_value:51484}}} destination:{address:{socket_address:{address:\"10.132.0.81:443\" port_value:443}}} request:{time:{seconds:1785951238 nanos:779651313} http:{id:\"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a1e09f-kserve-workload-svc.ai-tenant-e2e-shared-a-a1e09f.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e\"} path:\"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions\" host:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"96a1a60f1a5bc977f2e0b3da74c4d4320533a9a18620de8cdf68cf939943eb93\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZnFdpSUuqgyPRYNo_fDBXaLPNtyp5sn3X1gEtrG0hjFnmumcccDdzHenJ7dm"} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4444ebf3-fb08-40ae-bc32-805da6741a4e","keyName":"e2e-rate-a-a48705","subscription":"e2e-rate-iso-a-a48705","tenant":"e2e-shared-a-a1e09f","userId":"4444ebf3-fb08-40ae-bc32-805da6741a4e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e09f/models/facebook/opt-125m","name":"rate-test-model-a1e09f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a48705","namespace":"ai-tenant-e2e-shared-a-a1e09f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f"}} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a1e09f-kserve-workload-svc.ai-tenant-e2e-shared-a-a1e09f.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e"},"host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":779651313,"seconds":1785951238}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51484},"address":"10.134.0.12:51484"}}}}},"destination":{"address":"10.132.0.81:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"96a1a60f1a5bc977f2e0b3da74c4d4320533a9a18620de8cdf68cf939943eb93"},"headers":{":authority":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a1e09f-kserve-workload-svc.ai-tenant-e2e-shared-a-a1e09f.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e"},"host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":779651313,"seconds":1785951238},"url_path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:51484","port":51484}}} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e09f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a48705"} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4444ebf3-fb08-40ae-bc32-805da6741a4e","keyName":"e2e-rate-a-a48705","selected_subscription":"e2e-rate-iso-a-a48705","selected_subscription_key":"ai-tenant-e2e-shared-a-a1e09f/e2e-rate-iso-a-a48705@ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e09f/models/facebook/opt-125m","name":"rate-test-model-a1e09f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a48705","namespace":"ai-tenant-e2e-shared-a-a1e09f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T17:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00cf336d-5f2a-4432-bcc2-1f3666c3cb5e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:51496","PortSpecifier":{"PortValue":51496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","object":"source:{address:{socket_address:{address:\"10.134.0.12:51496\" port_value:51496}}} destination:{address:{socket_address:{address:\"10.132.0.81:443\" port_value:443}}} request:{time:{seconds:1785951239 nanos:825513490} http:{id:\"8a0cd4bf-1812-421e-9319-11b5ca2ccbde\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a1e09f-kserve-workload-svc.ai-tenant-e2e-shared-a-a1e09f.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"8a0cd4bf-1812-421e-9319-11b5ca2ccbde\"} path:\"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions\" host:\"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"96a1a60f1a5bc977f2e0b3da74c4d4320533a9a18620de8cdf68cf939943eb93\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZnFdpSUuqgyPRYNo_fDBXaLPNtyp5sn3X1gEtrG0hjFnmumcccDdzHenJ7dm"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4444ebf3-fb08-40ae-bc32-805da6741a4e","keyName":"e2e-rate-a-a48705","subscription":"e2e-rate-iso-a-a48705","tenant":"e2e-shared-a-a1e09f","userId":"4444ebf3-fb08-40ae-bc32-805da6741a4e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1e09f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e09f/models/facebook/opt-125m","name":"rate-test-model-a1e09f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a48705","namespace":"ai-tenant-e2e-shared-a-a1e09f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f"}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a1e09f-kserve-workload-svc.ai-tenant-e2e-shared-a-a1e09f.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde"},"host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":825513490,"seconds":1785951239}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51496},"address":"10.134.0.12:51496"}}}}},"destination":{"address":"10.132.0.81:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"96a1a60f1a5bc977f2e0b3da74c4d4320533a9a18620de8cdf68cf939943eb93"},"headers":{":authority":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a1e09f-kserve-workload-svc.ai-tenant-e2e-shared-a-a1e09f.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.81~e2e-shared-a-a1e09f-openshift-default-55f8867b-cw84j.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde"},"host":"e2e-shared-a-a1e09f.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","method":"POST","path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":825513490,"seconds":1785951239},"url_path":"/ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:51496","port":51496}}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1e09f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a48705"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4444ebf3-fb08-40ae-bc32-805da6741a4e","keyName":"e2e-rate-a-a48705","selected_subscription":"e2e-rate-iso-a-a48705","selected_subscription_key":"ai-tenant-e2e-shared-a-a1e09f/e2e-rate-iso-a-a48705@ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a1e09f/models/facebook/opt-125m","name":"rate-test-model-a1e09f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a48705","namespace":"ai-tenant-e2e-shared-a-a1e09f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1e09f/rate-test-model-a1e09f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a0cd4bf-1812-421e-9319-11b5ca2ccbde","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58298","PortSpecifier":{"PortValue":58298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9364cb75-7405-4f03-90f1-88dcb251e332","method":"POST","path":"/ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3/v1/completions","host":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","object":"source:{address:{socket_address:{address:\"10.134.0.12:58298\" port_value:58298}}} destination:{address:{socket_address:{address:\"10.132.0.82:443\" port_value:443}}} request:{time:{seconds:1785951239 nanos:860715995} http:{id:\"9364cb75-7405-4f03-90f1-88dcb251e332\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a81ee3-kserve-workload-svc.ai-tenant-e2e-shared-b-a81ee3.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.82~e2e-shared-b-a81ee3-openshift-default-5cd6cf6568-vklnx.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"9364cb75-7405-4f03-90f1-88dcb251e332\"} path:\"/ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3/v1/completions\" host:\"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gw9z4IFiVRIfQqCm_ki8IMLeKkoMsnNIfBisdA25nIkB4QSrHRuDyQ9RaJDt"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a81ee3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a81ee3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25cf6aae-66d7-405e-8ede-3e6fbf2837cd","keyName":"e2e-rate-b-a48705","subscription":"e2e-rate-iso-b-a48705","tenant":"e2e-shared-b-a81ee3","userId":"25cf6aae-66d7-405e-8ede-3e6fbf2837cd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a81ee3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a81ee3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-a81ee3/models/facebook/opt-125m","name":"rate-test-model-a81ee3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a48705","namespace":"ai-tenant-e2e-shared-b-a81ee3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3"}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a81ee3-kserve-workload-svc.ai-tenant-e2e-shared-b-a81ee3.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.82~e2e-shared-b-a81ee3-openshift-default-5cd6cf6568-vklnx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"9364cb75-7405-4f03-90f1-88dcb251e332"},"host":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"9364cb75-7405-4f03-90f1-88dcb251e332","method":"POST","path":"/ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":860715995,"seconds":1785951239}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58298},"address":"10.134.0.12:58298"}}}}},"destination":{"address":"10.132.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"},"headers":{":authority":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a81ee3-kserve-workload-svc.ai-tenant-e2e-shared-b-a81ee3.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.82~e2e-shared-b-a81ee3-openshift-default-5cd6cf6568-vklnx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"9364cb75-7405-4f03-90f1-88dcb251e332"},"host":"e2e-shared-b-a81ee3.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"9364cb75-7405-4f03-90f1-88dcb251e332","method":"POST","path":"/ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":860715995,"seconds":1785951239},"url_path":"/ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:58298","port":58298}}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a81ee3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a48705"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25cf6aae-66d7-405e-8ede-3e6fbf2837cd","keyName":"e2e-rate-b-a48705","selected_subscription":"e2e-rate-iso-b-a48705","selected_subscription_key":"ai-tenant-e2e-shared-b-a81ee3/e2e-rate-iso-b-a48705@ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-a81ee3/models/facebook/opt-125m","name":"rate-test-model-a81ee3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a48705","namespace":"ai-tenant-e2e-shared-b-a81ee3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a81ee3/rate-test-model-a81ee3"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T17:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9364cb75-7405-4f03-90f1-88dcb251e332","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/402f5de4bded2b3df0f87fd8e4bf0b085401eb0799bf48dfab0f7b6a6eb88053"} {"level":"info","ts":"2026-08-05T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d73f4aba0bb3ae4334bdd64f06ac0a2fd1f13ed21ee4c10df098e29912fe6bcc"} {"level":"info","ts":"2026-08-05T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a106ada1107d910607a078c2244a850495a7900b26a39fed2c2062bdf17b52c"} {"level":"info","ts":"2026-08-05T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8995b25f662bb42feb4552cb10690ec89efe2407134b5e3dcf020b577cc8edda"} {"level":"info","ts":"2026-08-05T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60f033184477fd99fbfd387238196547a8fa045873851add0032b9f0f1b2f4be"} {"level":"info","ts":"2026-08-05T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48fe7802ed76ac7aa46489506810da6ce9bd050d0871e6d2a86300e84d346367"} {"level":"info","ts":"2026-08-05T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/336e2d87b34672979a7d6c38ecab3937fff9266a8e275ba079e747c8fa388f81"} {"level":"info","ts":"2026-08-05T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf98718338cc8de9a26c45e464495c9d8ee714c917f58872e90dd74e1c385abc"} {"level":"info","ts":"2026-08-05T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afa32214a1e1379306bbfdd96cfcd8936129fb20821eca8e16b189fb41380120"} {"level":"info","ts":"2026-08-05T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb22ba6f641663fd9a4a417b48421ef94fcd93bc371223986ba363ebad11d8ee"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8ee95ec91fbcdc938df1bb67c35e6d0ca6dc6d5463452dbabc4f6d0c304f86e"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45f2c8414db4ab1dc211bc77b9a65c022d135f149817b2c328effbe0c650ee2e"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96a1a60f1a5bc977f2e0b3da74c4d4320533a9a18620de8cdf68cf939943eb93"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e47686f79ed74ba5126b89013e43c471e80b4d97b6c999b2f4107c19cc345a17"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f111d3a1734507cc53b53b15d2d0d0195efbefc691470b7c82e0c332f071b9"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16ced8519cb7bceab428e356dfbaa3a20111767659333b2f7be247a8c2b5537e"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/157c0caa7d494690d376ad7eb5d968529a0803c21d433fa698db351594fdfe01"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a2a31bbbaedf8380ea226ba40e3f9e4a59a140858c2a6641e78691bb7f16782"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec57b722660ea0795fcbd9f5286be7c6d1476677418b4fdccdf5c33cbcf23a82"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3c663ac0ed6447fd58870b04ccded55b36d3e0c32722fb47fbe4439c41c8baf"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/383d10a97462570dac46c243d4237f81ae4f08e33a1ddb95a21e34e153199ff9"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3c5df7e4b364ab97db5fb738d52f8c0f9c7acd388eb2fbd8d2d5ff5e31eb240"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77c24d89146127ca44e3b226eb4eb62eee59f9b55b584bb2a51be4a874d9430a"} {"level":"info","ts":"2026-08-05T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93f7aef96b1823cbe987ae27f4de6d12bf093189c025633d627c8997093a6a8f"} {"level":"info","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"492517f4-36db-4c42-a7da-99816ea8d277","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:54976","PortSpecifier":{"PortValue":54976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"492517f4-36db-4c42-a7da-99816ea8d277","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"492517f4-36db-4c42-a7da-99816ea8d277","object":"source:{address:{socket_address:{address:\"10.134.0.12:54976\" port_value:54976}}} destination:{address:{socket_address:{address:\"10.132.0.34:443\" port_value:443}}} request:{time:{seconds:1785951328 nanos:163629809} http:{id:\"492517f4-36db-4c42-a7da-99816ea8d277\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.34~maas-default-gateway-openshift-default-78bb78ff78-vmm6m.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"492517f4-36db-4c42-a7da-99816ea8d277\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"492517f4-36db-4c42-a7da-99816ea8d277","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"492517f4-36db-4c42-a7da-99816ea8d277","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/00f65853d772"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=88c11bf7-566e-42d5-9316-c1b8c1117b7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b4018a-9cf7-42cf-83a7-349f19ba230c","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"492517f4-36db-4c42-a7da-99816ea8d277","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/00f65853d772"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=88c11bf7-566e-42d5-9316-c1b8c1117b7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b4018a-9cf7-42cf-83a7-349f19ba230c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.34~maas-default-gateway-openshift-default-78bb78ff78-vmm6m.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"492517f4-36db-4c42-a7da-99816ea8d277"},"host":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"492517f4-36db-4c42-a7da-99816ea8d277","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":163629809,"seconds":1785951328}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":54976},"address":"10.134.0.12:54976"}}}}},"destination":{"address":"10.132.0.34:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXZtbTZtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.34~maas-default-gateway-openshift-default-78bb78ff78-vmm6m.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"492517f4-36db-4c42-a7da-99816ea8d277"},"host":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"492517f4-36db-4c42-a7da-99816ea8d277","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":163629809,"seconds":1785951328},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:54976","port":54976}}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"492517f4-36db-4c42-a7da-99816ea8d277","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"492517f4-36db-4c42-a7da-99816ea8d277","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"492517f4-36db-4c42-a7da-99816ea8d277","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"492517f4-36db-4c42-a7da-99816ea8d277","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"492517f4-36db-4c42-a7da-99816ea8d277","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"492517f4-36db-4c42-a7da-99816ea8d277","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"492517f4-36db-4c42-a7da-99816ea8d277","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"492517f4-36db-4c42-a7da-99816ea8d277","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:54978","PortSpecifier":{"PortValue":54978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"041ebc9e-1781-415a-9446-dc1063c53c15","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","object":"source:{address:{socket_address:{address:\"10.134.0.12:54978\" port_value:54978}}} destination:{address:{socket_address:{address:\"10.132.0.34:443\" port_value:443}}} request:{time:{seconds:1785951328 nanos:217217383} http:{id:\"041ebc9e-1781-415a-9446-dc1063c53c15\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXZtbTZtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.34~maas-default-gateway-openshift-default-78bb78ff78-vmm6m.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"041ebc9e-1781-415a-9446-dc1063c53c15\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NvRPsmztf1X7VtkI_mS1quTyahyH0V3YOfqfGJY3KrVEP02uRN3o78d8lR9d"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f095d1d2-d8a5-4cf3-835a-cb21a021c4be","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"f095d1d2-d8a5-4cf3-835a-cb21a021c4be","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.34~maas-default-gateway-openshift-default-78bb78ff78-vmm6m.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"041ebc9e-1781-415a-9446-dc1063c53c15"},"host":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"041ebc9e-1781-415a-9446-dc1063c53c15","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":217217383,"seconds":1785951328}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":54978},"address":"10.134.0.12:54978"}}}}},"destination":{"address":"10.132.0.34:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.34~maas-default-gateway-openshift-default-78bb78ff78-vmm6m.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"041ebc9e-1781-415a-9446-dc1063c53c15"},"host":"maas.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"041ebc9e-1781-415a-9446-dc1063c53c15","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":217217383,"seconds":1785951328},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:54978","port":54978}}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f095d1d2-d8a5-4cf3-835a-cb21a021c4be","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T17:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"041ebc9e-1781-415a-9446-dc1063c53c15","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3"} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3"} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df"} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3"} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df"} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df"} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df"} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a"} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a"} {"level":"info","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df"} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b"} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a"} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026"} {"level":"error","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcfca6f461162a8a44b5ca78dbfe1843246f935987b60caf308d2fe71d9a1e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcfca6f461162a8a44b5ca78dbfe1843246f935987b60caf308d2fe71d9a1e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcfca6f461162a8a44b5ca78dbfe1843246f935987b60caf308d2fe71d9a1e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcfca6f461162a8a44b5ca78dbfe1843246f935987b60caf308d2fe71d9a1e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dcfca6f461162a8a44b5ca78dbfe1843246f935987b60caf308d2fe71d9a1e8"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcfca6f461162a8a44b5ca78dbfe1843246f935987b60caf308d2fe71d9a1e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dcfca6f461162a8a44b5ca78dbfe1843246f935987b60caf308d2fe71d9a1e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcfca6f461162a8a44b5ca78dbfe1843246f935987b60caf308d2fe71d9a1e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dcfca6f461162a8a44b5ca78dbfe1843246f935987b60caf308d2fe71d9a1e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dcfca6f461162a8a44b5ca78dbfe1843246f935987b60caf308d2fe71d9a1e8"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765"} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1"} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1"} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403"} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1"} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T17:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403"} {"level":"info","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:33344","PortSpecifier":{"PortValue":33344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","object":"source:{address:{socket_address:{address:\"10.134.0.12:33344\" port_value:33344}}} destination:{address:{socket_address:{address:\"10.132.0.86:443\" port_value:443}}} request:{time:{seconds:1785951376 nanos:48299038} http:{id:\"cc29a18f-64ff-4299-85cf-1874cf5adc01\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-09e18b.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.86~e2e-ipp-a-09e18b-openshift-default-74c6478696-7pndt.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"cc29a18f-64ff-4299-85cf-1874cf5adc01\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/00f65853d772"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=88c11bf7-566e-42d5-9316-c1b8c1117b7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b4018a-9cf7-42cf-83a7-349f19ba230c","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/00f65853d772"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=88c11bf7-566e-42d5-9316-c1b8c1117b7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b4018a-9cf7-42cf-83a7-349f19ba230c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.86:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-09e18b.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.86~e2e-ipp-a-09e18b-openshift-default-74c6478696-7pndt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cc29a18f-64ff-4299-85cf-1874cf5adc01"},"host":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":48299038,"seconds":1785951376}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33344},"address":"10.134.0.12:33344"}}}}},"destination":{"address":"10.132.0.86:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b"},"headers":{":authority":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-09e18b.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.86~e2e-ipp-a-09e18b-openshift-default-74c6478696-7pndt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cc29a18f-64ff-4299-85cf-1874cf5adc01"},"host":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":48299038,"seconds":1785951376},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:33344","port":33344}}} {"level":"debug","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-09e18b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T17:36:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc29a18f-64ff-4299-85cf-1874cf5adc01","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:33358","PortSpecifier":{"PortValue":33358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","method":"POST","path":"/ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b/v1/chat/completions","host":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","object":"source:{address:{socket_address:{address:\"10.134.0.12:33358\" port_value:33358}}} destination:{address:{socket_address:{address:\"10.132.0.86:443\" port_value:443}}} request:{time:{seconds:1785951378 nanos:112471324} http:{id:\"5f9d21cf-0e05-4147-851f-9cd656191aa4\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-09e18b-kserve-workload-svc.ai-tenant-e2e-ipp-a-09e18b.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS0wOWUxOGItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTA5ZTE4Yi1vcGVuc2hpZnQtZGVmYXVsdC03NGM2NDc4Njk2LTdwbmR0CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTA5ZTE4Yi1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS0wOWUxOGItb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.86~e2e-ipp-a-09e18b-openshift-default-74c6478696-7pndt.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"5f9d21cf-0e05-4147-851f-9cd656191aa4\"} path:\"/ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b/v1/chat/completions\" host:\"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9PmtQH1fUcKPW6pF_a0Ynw4Ol1nsuyjGHHtDXRNN0oZ7KHW5KoosysADQmXr"} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-09e18b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-09e18b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e83ae97-2af3-4390-a21a-58dbbcf4ee9c","keyName":"e2e-ipp-09e18b","subscription":"ipp-route-09e18b-sub","tenant":"e2e-ipp-a-09e18b","userId":"1e83ae97-2af3-4390-a21a-58dbbcf4ee9c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-09e18b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-09e18b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-09e18b/models/facebook/opt-125m","name":"ipp-route-09e18b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-09e18b-sub","namespace":"ai-tenant-e2e-ipp-a-09e18b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b"}} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-09e18b-kserve-workload-svc.ai-tenant-e2e-ipp-a-09e18b.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.86~e2e-ipp-a-09e18b-openshift-default-74c6478696-7pndt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5f9d21cf-0e05-4147-851f-9cd656191aa4"},"host":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","method":"POST","path":"/ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":112471324,"seconds":1785951378}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33358},"address":"10.134.0.12:33358"}}}}},"destination":{"address":"10.132.0.86:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403"},"headers":{":authority":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-09e18b-kserve-workload-svc.ai-tenant-e2e-ipp-a-09e18b.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.86~e2e-ipp-a-09e18b-openshift-default-74c6478696-7pndt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5f9d21cf-0e05-4147-851f-9cd656191aa4"},"host":"e2e-ipp-a-09e18b.apps.ffad8a96-5440-496b-b5c3-00f65853d772.prod.konfluxeaas.com","id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","method":"POST","path":"/ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":112471324,"seconds":1785951378},"url_path":"/ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:33358","port":33358}}} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-09e18b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-09e18b-sub"} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1e83ae97-2af3-4390-a21a-58dbbcf4ee9c","keyName":"e2e-ipp-09e18b","selected_subscription":"ipp-route-09e18b-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b-sub@ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-09e18b/models/facebook/opt-125m","name":"ipp-route-09e18b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-09e18b-sub","namespace":"ai-tenant-e2e-ipp-a-09e18b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-09e18b/ipp-route-09e18b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T17:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f9d21cf-0e05-4147-851f-9cd656191aa4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T17:37:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e11eeecf4fd060882509fd25e48831cedb64b533845b6d613e930a3d8d4f1c2b"} {"level":"info","ts":"2026-08-05T17:37:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/625955e17038c42676bb52153b34fe35ab9ae9b286366a4a516f29ad2afab2e1"} {"level":"info","ts":"2026-08-05T17:37:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9203acb22816c85cc2c7da8d7ac6e7379bbde7fa435565b20015d254fc39013a"} {"level":"info","ts":"2026-08-05T17:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dcfca6f461162a8a44b5ca78dbfe1843246f935987b60caf308d2fe71d9a1e8"} {"level":"info","ts":"2026-08-05T17:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69c586af6bc19e11bf07b120623203c4c05810011ebb83ac3720e40bb2ba1cbf"} {"level":"info","ts":"2026-08-05T17:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27522ef50a88e1d5b73f7d6bb7cce81887b7589e4882b15419ca3282915d0026"} {"level":"info","ts":"2026-08-05T17:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96f87188437c5e08d1cffc2437b3a034bb8ec7b7c18b5ab53ac46a97d656f765"} {"level":"info","ts":"2026-08-05T17:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db2bba44a965b7249af24a9cc0f2df1e848ae135b0326df20314845e39475a18"} {"level":"info","ts":"2026-08-05T17:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a8cd39a9b216d4dd1cc167872fe26ce8d32854570fb733d02b672850ba787df"} {"level":"info","ts":"2026-08-05T17:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3227343d4e77f1850ea6c4deb351ede072d9727161cb0a1a5dc0c8c2e6f977ed"} {"level":"info","ts":"2026-08-05T17:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d924a2b3d9b38b0c992aafffd99dfd423cec1a050c2b304c3197a4785303403"} {"level":"info","ts":"2026-08-05T17:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4f7324a16ce1743e65a1ae9e10d76c88c200d3239cd3cf08921e1e550b141f3"}