{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"}
{"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"}
{"level":"error","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"}
{"level":"error","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914"}
{"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529"}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"}
{"level":"error","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56718","PortSpecifier":{"PortValue":56718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56718","PortSpecifier":{"PortValue":56718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566713,"nanos":608634798},"http":{"id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43798","PortSpecifier":{"PortValue":43798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43798","PortSpecifier":{"PortValue":43798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566713,"nanos":647573195},"http":{"id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56728","PortSpecifier":{"PortValue":56728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56728","PortSpecifier":{"PortValue":56728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566713,"nanos":693059946},"http":{"id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56740","PortSpecifier":{"PortValue":56740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56740","PortSpecifier":{"PortValue":56740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566714,"nanos":751273241},"http":{"id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56746","PortSpecifier":{"PortValue":56746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56746","PortSpecifier":{"PortValue":56746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566715,"nanos":787660864},"http":{"id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50d7809c-5e78-48ca-8518-577ba6824600","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56748","PortSpecifier":{"PortValue":56748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50d7809c-5e78-48ca-8518-577ba6824600","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50d7809c-5e78-48ca-8518-577ba6824600","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56748","PortSpecifier":{"PortValue":56748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566716,"nanos":825185562},"http":{"id":"50d7809c-5e78-48ca-8518-577ba6824600","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50d7809c-5e78-48ca-8518-577ba6824600","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50d7809c-5e78-48ca-8518-577ba6824600","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50d7809c-5e78-48ca-8518-577ba6824600","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56756","PortSpecifier":{"PortValue":56756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56756","PortSpecifier":{"PortValue":56756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566717,"nanos":870436292},"http":{"id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56764","PortSpecifier":{"PortValue":56764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca540e27-44e6-4f03-b592-dc95e3836527","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56764","PortSpecifier":{"PortValue":56764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566718,"nanos":904170674},"http":{"id":"ca540e27-44e6-4f03-b592-dc95e3836527","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56772","PortSpecifier":{"PortValue":56772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56772","PortSpecifier":{"PortValue":56772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566719,"nanos":940510766},"http":{"id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58604","PortSpecifier":{"PortValue":58604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0554cc95-ed84-423c-8e49-e71d8573ec00","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58604","PortSpecifier":{"PortValue":58604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566728,"nanos":547075283},"http":{"id":"0554cc95-ed84-423c-8e49-e71d8573ec00","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51086","PortSpecifier":{"PortValue":51086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51086","PortSpecifier":{"PortValue":51086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566728,"nanos":583033076},"http":{"id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58608","PortSpecifier":{"PortValue":58608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fe04807-fc63-4b11-91a2-56357ff482f0","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58608","PortSpecifier":{"PortValue":58608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566728,"nanos":619734154},"http":{"id":"3fe04807-fc63-4b11-91a2-56357ff482f0","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG\"}"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","subscription":"e2e-rate-iso-a-59d6a6","tenant":"e2e-shared-a-42e123","userId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-59d6a6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-59d6a6"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","selected_subscription":"e2e-rate-iso-a-59d6a6","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-59d6a6@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58624","PortSpecifier":{"PortValue":58624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c529d85e-ad07-4d95-8de7-634fcabbc732","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58624","PortSpecifier":{"PortValue":58624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566729,"nanos":656519964},"http":{"id":"c529d85e-ad07-4d95-8de7-634fcabbc732","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG"}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG\"}"}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","subscription":"e2e-rate-iso-a-59d6a6","tenant":"e2e-shared-a-42e123","userId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-59d6a6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-59d6a6"}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","selected_subscription":"e2e-rate-iso-a-59d6a6","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-59d6a6@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58628","PortSpecifier":{"PortValue":58628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ed135be-5ec2-426c-93fb-4389d99809b8","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58628","PortSpecifier":{"PortValue":58628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566730,"nanos":688553443},"http":{"id":"6ed135be-5ec2-426c-93fb-4389d99809b8","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG\"}"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","subscription":"e2e-rate-iso-a-59d6a6","tenant":"e2e-shared-a-42e123","userId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-59d6a6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-59d6a6"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","selected_subscription":"e2e-rate-iso-a-59d6a6","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-59d6a6@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51098","PortSpecifier":{"PortValue":51098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","method":"POST","path":"/ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb/v1/completions","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51098","PortSpecifier":{"PortValue":51098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566730,"nanos":719492691},"http":{"id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8cXqp4bFEW8MLX1d_rXK1DeFuzd8Xq3ueIqnuWpMsjHTwNeLqKY32voJFH9G"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8cXqp4bFEW8MLX1d_rXK1DeFuzd8Xq3ueIqnuWpMsjHTwNeLqKY32voJFH9G\"}"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"28477ee7-bf98-4274-b5cd-a313eedbf982","keyName":"e2e-rate-b-59d6a6","subscription":"e2e-rate-iso-b-59d6a6","tenant":"e2e-shared-b-c5c3fb","userId":"28477ee7-bf98-4274-b5cd-a313eedbf982","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb\",\"requestedSubscription\":\"e2e-rate-iso-b-59d6a6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c5c3fb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-59d6a6","namespace":"ai-tenant-e2e-shared-b-c5c3fb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb"}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-59d6a6"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"28477ee7-bf98-4274-b5cd-a313eedbf982","keyName":"e2e-rate-b-59d6a6","selected_subscription":"e2e-rate-iso-b-59d6a6","selected_subscription_key":"ai-tenant-e2e-shared-b-c5c3fb/e2e-rate-iso-b-59d6a6@ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c5c3fb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-59d6a6","namespace":"ai-tenant-e2e-shared-b-c5c3fb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"}
{"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9"}