{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"}
{"level":"error","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"}
{"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"}
{"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"}
{"level":"info","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33272","PortSpecifier":{"PortValue":33272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33272","PortSpecifier":{"PortValue":33272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646248,"nanos":984614935},"http":{"id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}}
{"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41388","PortSpecifier":{"PortValue":41388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be01ff05-0f38-42d4-afec-7ad975965cdb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41388","PortSpecifier":{"PortValue":41388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646249,"nanos":26298345},"http":{"id":"be01ff05-0f38-42d4-afec-7ad975965cdb","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/rate-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33286","PortSpecifier":{"PortValue":33286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33286","PortSpecifier":{"PortValue":33286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646249,"nanos":67077202},"http":{"id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33288","PortSpecifier":{"PortValue":33288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"415a35e8-5020-427d-a84d-6fb77396fb94","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33288","PortSpecifier":{"PortValue":33288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646250,"nanos":154623955},"http":{"id":"415a35e8-5020-427d-a84d-6fb77396fb94","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33292","PortSpecifier":{"PortValue":33292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33292","PortSpecifier":{"PortValue":33292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646251,"nanos":216897116},"http":{"id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33298","PortSpecifier":{"PortValue":33298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33298","PortSpecifier":{"PortValue":33298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646252,"nanos":254243950},"http":{"id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33314","PortSpecifier":{"PortValue":33314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33314","PortSpecifier":{"PortValue":33314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646253,"nanos":292735454},"http":{"id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33318","PortSpecifier":{"PortValue":33318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33318","PortSpecifier":{"PortValue":33318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646254,"nanos":332932668},"http":{"id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82825676-0943-4f65-9176-26556585687c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33324","PortSpecifier":{"PortValue":33324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82825676-0943-4f65-9176-26556585687c","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82825676-0943-4f65-9176-26556585687c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33324","PortSpecifier":{"PortValue":33324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646255,"nanos":367932173},"http":{"id":"82825676-0943-4f65-9176-26556585687c","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82825676-0943-4f65-9176-26556585687c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82825676-0943-4f65-9176-26556585687c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82825676-0943-4f65-9176-26556585687c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82825676-0943-4f65-9176-26556585687c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82825676-0943-4f65-9176-26556585687c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41180","PortSpecifier":{"PortValue":41180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41180","PortSpecifier":{"PortValue":41180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646264,"nanos":205119827},"http":{"id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:36314","PortSpecifier":{"PortValue":36314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:36314","PortSpecifier":{"PortValue":36314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646264,"nanos":244120635},"http":{"id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/rate-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41190","PortSpecifier":{"PortValue":41190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9e7851c-81ee-4534-b449-bb17b732889a","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41190","PortSpecifier":{"PortValue":41190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646264,"nanos":278431826},"http":{"id":"e9e7851c-81ee-4534-b449-bb17b732889a","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg\"}"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","subscription":"e2e-rate-iso-a-b4fce2","tenant":"e2e-shared-a-d89949","userId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-b4fce2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4fce2"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","selected_subscription":"e2e-rate-iso-a-b4fce2","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-b4fce2@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41196","PortSpecifier":{"PortValue":41196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41196","PortSpecifier":{"PortValue":41196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646265,"nanos":315489324},"http":{"id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg"}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg\"}"}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","subscription":"e2e-rate-iso-a-b4fce2","tenant":"e2e-shared-a-d89949","userId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-b4fce2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4fce2"}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","selected_subscription":"e2e-rate-iso-a-b4fce2","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-b4fce2@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41210","PortSpecifier":{"PortValue":41210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41210","PortSpecifier":{"PortValue":41210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646266,"nanos":347759840},"http":{"id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg\"}"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","subscription":"e2e-rate-iso-a-b4fce2","tenant":"e2e-shared-a-d89949","userId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-b4fce2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4fce2"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","selected_subscription":"e2e-rate-iso-a-b4fce2","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-b4fce2@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:36330","PortSpecifier":{"PortValue":36330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","method":"POST","path":"/ai-tenant-e2e-shared-b-449411/rate-test-model-449411/v1/completions","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:36330","PortSpecifier":{"PortValue":36330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646266,"nanos":381713047},"http":{"id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-449411/rate-test-model-449411/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XlWMpQWvT8KZkRxl_q3fAhWXapLALJKH2LcYLiq6ajQi82KV0QTFxHxYtL3D"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XlWMpQWvT8KZkRxl_q3fAhWXapLALJKH2LcYLiq6ajQi82KV0QTFxHxYtL3D\"}"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5cc006a3-86ca-46c6-b543-3f2b6920cacb","keyName":"e2e-rate-b-b4fce2","subscription":"e2e-rate-iso-b-b4fce2","tenant":"e2e-shared-b-449411","userId":"5cc006a3-86ca-46c6-b543-3f2b6920cacb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-449411/rate-test-model-449411\",\"requestedSubscription\":\"e2e-rate-iso-b-b4fce2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-449411","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b4fce2","namespace":"ai-tenant-e2e-shared-b-449411","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-449411/rate-test-model-449411"}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/rate-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-b4fce2"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5cc006a3-86ca-46c6-b543-3f2b6920cacb","keyName":"e2e-rate-b-b4fce2","selected_subscription":"e2e-rate-iso-b-b4fce2","selected_subscription_key":"ai-tenant-e2e-shared-b-449411/e2e-rate-iso-b-b4fce2@ai-tenant-e2e-shared-b-449411/rate-test-model-449411","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-449411","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b4fce2","namespace":"ai-tenant-e2e-shared-b-449411","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-449411/rate-test-model-449411"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T15:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2"}
{"level":"info","ts":"2026-07-21T15:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"}
{"level":"info","ts":"2026-07-21T15:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c"}
{"level":"info","ts":"2026-07-21T15:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643"}
{"level":"info","ts":"2026-07-21T15:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f"}
{"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f"}