{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1"}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1"}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2"}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183"}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e"}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481"}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b"}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b"}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647"}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e"}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b"}
{"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44160","PortSpecifier":{"PortValue":44160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44160","PortSpecifier":{"PortValue":44160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565333,"nanos":870685622},"http":{"id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39390","PortSpecifier":{"PortValue":39390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3115a9b2-b006-4ded-a962-da6a2deffa73","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39390","PortSpecifier":{"PortValue":39390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565333,"nanos":909706623},"http":{"id":"3115a9b2-b006-4ded-a962-da6a2deffa73","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44176","PortSpecifier":{"PortValue":44176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9248ea16-b0b2-4610-81cd-9097d9015579","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44176","PortSpecifier":{"PortValue":44176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565333,"nanos":947630605},"http":{"id":"9248ea16-b0b2-4610-81cd-9097d9015579","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44180","PortSpecifier":{"PortValue":44180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44180","PortSpecifier":{"PortValue":44180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565335,"nanos":5894948},"http":{"id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44196","PortSpecifier":{"PortValue":44196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44196","PortSpecifier":{"PortValue":44196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565336,"nanos":39408054},"http":{"id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44210","PortSpecifier":{"PortValue":44210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb9b3e3f-99be-411c-b032-c786b29384e9","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44210","PortSpecifier":{"PortValue":44210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565337,"nanos":76317418},"http":{"id":"fb9b3e3f-99be-411c-b032-c786b29384e9","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44224","PortSpecifier":{"PortValue":44224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44224","PortSpecifier":{"PortValue":44224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565338,"nanos":107446526},"http":{"id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"780df277-0fa0-4571-a659-569274290774","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44230","PortSpecifier":{"PortValue":44230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"780df277-0fa0-4571-a659-569274290774","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"780df277-0fa0-4571-a659-569274290774","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44230","PortSpecifier":{"PortValue":44230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565339,"nanos":145426344},"http":{"id":"780df277-0fa0-4571-a659-569274290774","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"780df277-0fa0-4571-a659-569274290774","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"780df277-0fa0-4571-a659-569274290774","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"780df277-0fa0-4571-a659-569274290774","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"780df277-0fa0-4571-a659-569274290774","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"780df277-0fa0-4571-a659-569274290774","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"299cf016-8730-4cf7-b481-4f5677a14494","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44240","PortSpecifier":{"PortValue":44240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"299cf016-8730-4cf7-b481-4f5677a14494","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"299cf016-8730-4cf7-b481-4f5677a14494","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44240","PortSpecifier":{"PortValue":44240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565340,"nanos":177709056},"http":{"id":"299cf016-8730-4cf7-b481-4f5677a14494","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"299cf016-8730-4cf7-b481-4f5677a14494","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"299cf016-8730-4cf7-b481-4f5677a14494","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"299cf016-8730-4cf7-b481-4f5677a14494","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44246","PortSpecifier":{"PortValue":44246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44246","PortSpecifier":{"PortValue":44246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565341,"nanos":213100718},"http":{"id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57336","PortSpecifier":{"PortValue":57336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57336","PortSpecifier":{"PortValue":57336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565349,"nanos":919863207},"http":{"id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43834","PortSpecifier":{"PortValue":43834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a86ecb56-5cbd-4c14-a376-fd481578340b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43834","PortSpecifier":{"PortValue":43834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565349,"nanos":957052449},"http":{"id":"a86ecb56-5cbd-4c14-a376-fd481578340b","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3248780-afca-435a-b744-66c673389cb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57342","PortSpecifier":{"PortValue":57342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3248780-afca-435a-b744-66c673389cb6","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3248780-afca-435a-b744-66c673389cb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57342","PortSpecifier":{"PortValue":57342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565349,"nanos":990109077},"http":{"id":"d3248780-afca-435a-b744-66c673389cb6","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla"}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3248780-afca-435a-b744-66c673389cb6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla\"}"}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","subscription":"e2e-rate-iso-a-28edd6","tenant":"e2e-shared-a-329d3d","userId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3248780-afca-435a-b744-66c673389cb6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-28edd6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3248780-afca-435a-b744-66c673389cb6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-28edd6"}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","selected_subscription":"e2e-rate-iso-a-28edd6","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-28edd6@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3248780-afca-435a-b744-66c673389cb6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3248780-afca-435a-b744-66c673389cb6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57346","PortSpecifier":{"PortValue":57346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3e8cf66-1b70-4b96-a356-220494621e02","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57346","PortSpecifier":{"PortValue":57346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565351,"nanos":52516012},"http":{"id":"e3e8cf66-1b70-4b96-a356-220494621e02","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla"}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla\"}"}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","subscription":"e2e-rate-iso-a-28edd6","tenant":"e2e-shared-a-329d3d","userId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-28edd6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-28edd6"}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","selected_subscription":"e2e-rate-iso-a-28edd6","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-28edd6@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34584","PortSpecifier":{"PortValue":34584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34584","PortSpecifier":{"PortValue":34584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565352,"nanos":88759007},"http":{"id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla\"}"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","subscription":"e2e-rate-iso-a-28edd6","tenant":"e2e-shared-a-329d3d","userId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-28edd6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-28edd6"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","selected_subscription":"e2e-rate-iso-a-28edd6","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-28edd6@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46578","PortSpecifier":{"PortValue":46578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e611a756-f252-4794-9fba-bc067cc0c3e9","method":"POST","path":"/ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d/v1/completions","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46578","PortSpecifier":{"PortValue":46578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565352,"nanos":122463063},"http":{"id":"e611a756-f252-4794-9fba-bc067cc0c3e9","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fr6rOZGLtr3ycgSK_CeQTtLpzQ4cVp1znsPqsFoQPVwvapgS8GrlpP8fDlfV"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fr6rOZGLtr3ycgSK_CeQTtLpzQ4cVp1znsPqsFoQPVwvapgS8GrlpP8fDlfV\"}"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4b686b61-c40e-479a-8235-09326ceeddda","keyName":"e2e-rate-b-28edd6","subscription":"e2e-rate-iso-b-28edd6","tenant":"e2e-shared-b-02789d","userId":"4b686b61-c40e-479a-8235-09326ceeddda","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d\",\"requestedSubscription\":\"e2e-rate-iso-b-28edd6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-02789d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-28edd6","namespace":"ai-tenant-e2e-shared-b-02789d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d"}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-28edd6"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4b686b61-c40e-479a-8235-09326ceeddda","keyName":"e2e-rate-b-28edd6","selected_subscription":"e2e-rate-iso-b-28edd6","selected_subscription_key":"ai-tenant-e2e-shared-b-02789d/e2e-rate-iso-b-28edd6@ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-02789d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-28edd6","namespace":"ai-tenant-e2e-shared-b-02789d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T16:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647"}
{"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"}