{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37044","PortSpecifier":{"PortValue":37044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624819,"nanos":2925810},"http":{"id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/sub-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38590","PortSpecifier":{"PortValue":38590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73ea3d65-d1b7-498f-88cd-931a35955284","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38590","PortSpecifier":{"PortValue":38590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624819,"nanos":35674006},"http":{"id":"73ea3d65-d1b7-498f-88cd-931a35955284","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NZ7wHIHy72h0TwFP_dll4r5hGW56ABUb9zgQuoVJa4NgRAiBmSLfwv8yD0MG"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NZ7wHIHy72h0TwFP_dll4r5hGW56ABUb9zgQuoVJa4NgRAiBmSLfwv8yD0MG\"}"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d98dc698-79ea-4273-b813-135af64b13a6","keyName":"e2e-sub-iso-78f80c","subscription":"e2e-shared-sub-0a00e5","tenant":"e2e-shared-a-824408","userId":"d98dc698-79ea-4273-b813-135af64b13a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/sub-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0a00e5"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37050","PortSpecifier":{"PortValue":37050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d761e15-4249-4ea4-8946-556d2f075ed9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37050","PortSpecifier":{"PortValue":37050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624819,"nanos":67367429},"http":{"id":"8d761e15-4249-4ea4-8946-556d2f075ed9","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11FMZ76yzyyZi9Tv6_ZWeqHuLVugNRJXuzyQKSTQ2fYSE6uncaqbJv1aeXtGP"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11FMZ76yzyyZi9Tv6_ZWeqHuLVugNRJXuzyQKSTQ2fYSE6uncaqbJv1aeXtGP\"}"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a02c457-a258-4596-a370-baff26559583","keyName":"e2e-sub-iso-5035c5","subscription":"e2e-shared-sub-0a00e5","tenant":"e2e-shared-b-26961c","userId":"8a02c457-a258-4596-a370-baff26559583","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/sub-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0a00e5"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d2e0dedeeada7c40487657d70a24302724d1404afa3b6d58d3953b5f173b82a"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c14a8852664fae293a1466a35d279ac0443dd14e30cfacf5f3fcada1b5212bd1"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58e40476640921e69e88a87dd7790ef62bce1e167cb2ead575eb137ad2413c98"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"} {"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e370f4898d41c68dd62e4a5c2ceb77e60b75352b2cb9befd90380c1386668387"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1178374de50de153969511cac6876c57575a2e8e7333cee8e93808244fc64a19"} {"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6"} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"} {"level":"error","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586"} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8"} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640"} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387"} {"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"} {"level":"error","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39212","PortSpecifier":{"PortValue":39212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c3f408a-5147-4385-a5d5-8dda13910556","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39212","PortSpecifier":{"PortValue":39212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624898,"nanos":211715591},"http":{"id":"3c3f408a-5147-4385-a5d5-8dda13910556","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34662","PortSpecifier":{"PortValue":34662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34662","PortSpecifier":{"PortValue":34662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624898,"nanos":250191120},"http":{"id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39214","PortSpecifier":{"PortValue":39214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39214","PortSpecifier":{"PortValue":39214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624898,"nanos":294973376},"http":{"id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW\"}"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","subscription":"e2e-rate-iso-a-bc08a3","tenant":"e2e-shared-a-824408","userId":"14ccf043-8118-4c53-8c29-2fae4f760981","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-bc08a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc08a3"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","selected_subscription":"e2e-rate-iso-a-bc08a3","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-bc08a3@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f85122f7-4cae-4541-953d-703871e99934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39224","PortSpecifier":{"PortValue":39224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f85122f7-4cae-4541-953d-703871e99934","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f85122f7-4cae-4541-953d-703871e99934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39224","PortSpecifier":{"PortValue":39224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624899,"nanos":363772113},"http":{"id":"f85122f7-4cae-4541-953d-703871e99934","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW"} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f85122f7-4cae-4541-953d-703871e99934","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW\"}"} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","subscription":"e2e-rate-iso-a-bc08a3","tenant":"e2e-shared-a-824408","userId":"14ccf043-8118-4c53-8c29-2fae4f760981","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f85122f7-4cae-4541-953d-703871e99934","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-bc08a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f85122f7-4cae-4541-953d-703871e99934","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc08a3"} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","selected_subscription":"e2e-rate-iso-a-bc08a3","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-bc08a3@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f85122f7-4cae-4541-953d-703871e99934","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f85122f7-4cae-4541-953d-703871e99934","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39232","PortSpecifier":{"PortValue":39232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39232","PortSpecifier":{"PortValue":39232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624900,"nanos":400160656},"http":{"id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW"} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW\"}"} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","subscription":"e2e-rate-iso-a-bc08a3","tenant":"e2e-shared-a-824408","userId":"14ccf043-8118-4c53-8c29-2fae4f760981","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-bc08a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc08a3"} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","selected_subscription":"e2e-rate-iso-a-bc08a3","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-bc08a3@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52470","PortSpecifier":{"PortValue":52470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52470","PortSpecifier":{"PortValue":52470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624913,"nanos":584393090},"http":{"id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24eccefa-93f2-4e06-93c1-014801014078","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33692","PortSpecifier":{"PortValue":33692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24eccefa-93f2-4e06-93c1-014801014078","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24eccefa-93f2-4e06-93c1-014801014078","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33692","PortSpecifier":{"PortValue":33692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624913,"nanos":626911128},"http":{"id":"24eccefa-93f2-4e06-93c1-014801014078","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24eccefa-93f2-4e06-93c1-014801014078","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24eccefa-93f2-4e06-93c1-014801014078","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24eccefa-93f2-4e06-93c1-014801014078","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24eccefa-93f2-4e06-93c1-014801014078","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68417e72-c877-4634-862e-88404741fca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52472","PortSpecifier":{"PortValue":52472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68417e72-c877-4634-862e-88404741fca4","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68417e72-c877-4634-862e-88404741fca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52472","PortSpecifier":{"PortValue":52472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624913,"nanos":663636126},"http":{"id":"68417e72-c877-4634-862e-88404741fca4","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68417e72-c877-4634-862e-88404741fca4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe\"}"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","subscription":"e2e-rate-iso-a-ca8c89","tenant":"e2e-shared-a-824408","userId":"5409df98-4f08-4bc1-b666-c1235b456d5e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68417e72-c877-4634-862e-88404741fca4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-ca8c89\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68417e72-c877-4634-862e-88404741fca4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca8c89"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","selected_subscription":"e2e-rate-iso-a-ca8c89","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-ca8c89@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68417e72-c877-4634-862e-88404741fca4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68417e72-c877-4634-862e-88404741fca4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38916","PortSpecifier":{"PortValue":38916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"243d2372-d851-4070-8e88-6c97b76fc3b7","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38916","PortSpecifier":{"PortValue":38916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624914,"nanos":702372846},"http":{"id":"243d2372-d851-4070-8e88-6c97b76fc3b7","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe"} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe\"}"} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","subscription":"e2e-rate-iso-a-ca8c89","tenant":"e2e-shared-a-824408","userId":"5409df98-4f08-4bc1-b666-c1235b456d5e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-ca8c89\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca8c89"} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","selected_subscription":"e2e-rate-iso-a-ca8c89","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-ca8c89@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38930","PortSpecifier":{"PortValue":38930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ab97fd2-fa77-414d-851e-262c8614688e","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38930","PortSpecifier":{"PortValue":38930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624915,"nanos":744245995},"http":{"id":"4ab97fd2-fa77-414d-851e-262c8614688e","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe\"}"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","subscription":"e2e-rate-iso-a-ca8c89","tenant":"e2e-shared-a-824408","userId":"5409df98-4f08-4bc1-b666-c1235b456d5e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-ca8c89\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca8c89"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","selected_subscription":"e2e-rate-iso-a-ca8c89","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-ca8c89@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52556","PortSpecifier":{"PortValue":52556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","method":"POST","path":"/ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c/v1/completions","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52556","PortSpecifier":{"PortValue":52556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624915,"nanos":782220011},"http":{"id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RvUcsV0HxvIIjw9q_CsLVmeHqnVz8Ss0I2SKJJZyIRl7FVqgkFueF1EpLqnM"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RvUcsV0HxvIIjw9q_CsLVmeHqnVz8Ss0I2SKJJZyIRl7FVqgkFueF1EpLqnM\"}"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0fbcf8ee-b184-44f2-94e9-756b4642b14f","keyName":"e2e-rate-b-ca8c89","subscription":"e2e-rate-iso-b-ca8c89","tenant":"e2e-shared-b-26961c","userId":"0fbcf8ee-b184-44f2-94e9-756b4642b14f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c\",\"requestedSubscription\":\"e2e-rate-iso-b-ca8c89\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-26961c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ca8c89","namespace":"ai-tenant-e2e-shared-b-26961c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c"}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ca8c89"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0fbcf8ee-b184-44f2-94e9-756b4642b14f","keyName":"e2e-rate-b-ca8c89","selected_subscription":"e2e-rate-iso-b-ca8c89","selected_subscription_key":"ai-tenant-e2e-shared-b-26961c/e2e-rate-iso-b-ca8c89@ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-26961c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ca8c89","namespace":"ai-tenant-e2e-shared-b-26961c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3"} {"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"} {"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"} {"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8"} {"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9"} {"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586"} {"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"} {"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf"} {"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"} {"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050"}