{"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"}
{"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"}
{"level":"error","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43958","PortSpecifier":{"PortValue":43958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77dace01-b29b-4e14-be5b-4b0f1adada52","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43958","PortSpecifier":{"PortValue":43958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170403,"nanos":209790678},"http":{"id":"77dace01-b29b-4e14-be5b-4b0f1adada52","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45640","PortSpecifier":{"PortValue":45640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93976cfc-fc0d-413f-b410-df3f2c454aef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45640","PortSpecifier":{"PortValue":45640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170403,"nanos":260048955},"http":{"id":"93976cfc-fc0d-413f-b410-df3f2c454aef","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43970","PortSpecifier":{"PortValue":43970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03741ff7-ab51-4a3f-a27c-244b8c938311","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43970","PortSpecifier":{"PortValue":43970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170403,"nanos":309667179},"http":{"id":"03741ff7-ab51-4a3f-a27c-244b8c938311","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt\"}"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","subscription":"e2e-rate-iso-a-2aac43","tenant":"e2e-shared-a-932843","userId":"01d08be5-09c1-4d94-b002-453c28ac524c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-2aac43\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2aac43"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","selected_subscription":"e2e-rate-iso-a-2aac43","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-2aac43@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c8ad599-143a-451e-9270-19d01af9a598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43980","PortSpecifier":{"PortValue":43980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c8ad599-143a-451e-9270-19d01af9a598","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c8ad599-143a-451e-9270-19d01af9a598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43980","PortSpecifier":{"PortValue":43980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170404,"nanos":399772934},"http":{"id":"0c8ad599-143a-451e-9270-19d01af9a598","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt"}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt\"}"}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","subscription":"e2e-rate-iso-a-2aac43","tenant":"e2e-shared-a-932843","userId":"01d08be5-09c1-4d94-b002-453c28ac524c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-2aac43\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c8ad599-143a-451e-9270-19d01af9a598","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2aac43"}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","selected_subscription":"e2e-rate-iso-a-2aac43","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-2aac43@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c8ad599-143a-451e-9270-19d01af9a598","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c8ad599-143a-451e-9270-19d01af9a598","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43992","PortSpecifier":{"PortValue":43992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43992","PortSpecifier":{"PortValue":43992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170405,"nanos":454468322},"http":{"id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt"}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt\"}"}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","subscription":"e2e-rate-iso-a-2aac43","tenant":"e2e-shared-a-932843","userId":"01d08be5-09c1-4d94-b002-453c28ac524c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-2aac43\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2aac43"}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","selected_subscription":"e2e-rate-iso-a-2aac43","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-2aac43@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43558","PortSpecifier":{"PortValue":43558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97cd6ca5-4629-4581-9410-7a1453154c80","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43558","PortSpecifier":{"PortValue":43558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170431,"nanos":944207920},"http":{"id":"97cd6ca5-4629-4581-9410-7a1453154c80","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57819ad2-5f22-4228-b459-2770000d249a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57562","PortSpecifier":{"PortValue":57562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57819ad2-5f22-4228-b459-2770000d249a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57819ad2-5f22-4228-b459-2770000d249a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57562","PortSpecifier":{"PortValue":57562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170431,"nanos":987800014},"http":{"id":"57819ad2-5f22-4228-b459-2770000d249a","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57819ad2-5f22-4228-b459-2770000d249a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57819ad2-5f22-4228-b459-2770000d249a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57819ad2-5f22-4228-b459-2770000d249a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57819ad2-5f22-4228-b459-2770000d249a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43570","PortSpecifier":{"PortValue":43570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43570","PortSpecifier":{"PortValue":43570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170432,"nanos":26028751},"http":{"id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ"}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ\"}"}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","subscription":"e2e-rate-iso-a-5d2cc1","tenant":"e2e-shared-a-932843","userId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-5d2cc1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5d2cc1"}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","selected_subscription":"e2e-rate-iso-a-5d2cc1","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-5d2cc1@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46184","PortSpecifier":{"PortValue":46184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"caa73916-ee60-46d9-920c-9f9675ce05b4","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46184","PortSpecifier":{"PortValue":46184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170433,"nanos":71132632},"http":{"id":"caa73916-ee60-46d9-920c-9f9675ce05b4","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ"}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ\"}"}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","subscription":"e2e-rate-iso-a-5d2cc1","tenant":"e2e-shared-a-932843","userId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-5d2cc1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5d2cc1"}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","selected_subscription":"e2e-rate-iso-a-5d2cc1","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-5d2cc1@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46200","PortSpecifier":{"PortValue":46200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8713a217-dfe0-44cf-9024-f294d46f36fb","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46200","PortSpecifier":{"PortValue":46200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170434,"nanos":112563641},"http":{"id":"8713a217-dfe0-44cf-9024-f294d46f36fb","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ\"}"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","subscription":"e2e-rate-iso-a-5d2cc1","tenant":"e2e-shared-a-932843","userId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-5d2cc1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5d2cc1"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","selected_subscription":"e2e-rate-iso-a-5d2cc1","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-5d2cc1@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43990c59-31d6-4def-ba0d-896416261598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53460","PortSpecifier":{"PortValue":53460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43990c59-31d6-4def-ba0d-896416261598","method":"POST","path":"/ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6/v1/completions","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43990c59-31d6-4def-ba0d-896416261598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53460","PortSpecifier":{"PortValue":53460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170434,"nanos":154072976},"http":{"id":"43990c59-31d6-4def-ba0d-896416261598","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HexDjdjYVtTrAaYr_n8KU8zJPraVt8z6iNXVgyKW2F17uRqYbtbWjlfV3m9f"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43990c59-31d6-4def-ba0d-896416261598","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HexDjdjYVtTrAaYr_n8KU8zJPraVt8z6iNXVgyKW2F17uRqYbtbWjlfV3m9f\"}"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a5b9140f-43d9-4649-a0df-af65c789c754","keyName":"e2e-rate-b-5d2cc1","subscription":"e2e-rate-iso-b-5d2cc1","tenant":"e2e-shared-b-1f21d6","userId":"a5b9140f-43d9-4649-a0df-af65c789c754","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43990c59-31d6-4def-ba0d-896416261598","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6\",\"requestedSubscription\":\"e2e-rate-iso-b-5d2cc1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m","name":"rate-test-model-1f21d6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5d2cc1","namespace":"ai-tenant-e2e-shared-b-1f21d6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6"}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43990c59-31d6-4def-ba0d-896416261598","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-5d2cc1"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a5b9140f-43d9-4649-a0df-af65c789c754","keyName":"e2e-rate-b-5d2cc1","selected_subscription":"e2e-rate-iso-b-5d2cc1","selected_subscription_key":"ai-tenant-e2e-shared-b-1f21d6/e2e-rate-iso-b-5d2cc1@ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m","name":"rate-test-model-1f21d6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5d2cc1","namespace":"ai-tenant-e2e-shared-b-1f21d6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43990c59-31d6-4def-ba0d-896416261598","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43990c59-31d6-4def-ba0d-896416261598","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"}
{"level":"info","ts":"2026-07-27T16:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a722f0098cd78af304aadf071fc87744f29aae2565e4335042a4c5853b9eaa79"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e86801b8d0f400536d75c8b2d9f113a7f51b776cbf18da9deb2017f1d97cdb62"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a04d7ce37a2d0ed5ae4267acdd4b30037269119355ea7cdca6f41c32dd72be4"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26b8c8c4f5146430c3771f22ef9b6e8b9b27d7b30d5acdadaba06e2b521aee6d"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a182ee3721c47c42891b7271d9939e9d809e355480ab2597b36353a115028ed"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb80f801d4732ab34d8ac55be487434299be402d1236a6ba4147abcac0676a22"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/617f25290c21f61745e1c1f8cf16e002c802b8450d8d7854c2cda39a9cf51e01"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/115949c32f7516de5bfe9a54bef9fdee2e74ed3649078f3e4c69fb85e7d246fb"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311"}
{"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe"}
{"level":"info","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58468","PortSpecifier":{"PortValue":58468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58468","PortSpecifier":{"PortValue":58468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170504,"nanos":169151904},"http":{"id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","method":"POST","headers":{":authority":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58482","PortSpecifier":{"PortValue":58482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58482","PortSpecifier":{"PortValue":58482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170504,"nanos":224222666},"http":{"id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","method":"POST","headers":{":authority":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ku347sEJuqdbaKKQ_atXwhuW5Dh1xLKUuCI3JSe5yvWEP0ZBKeyT9qXpCd6E"}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ku347sEJuqdbaKKQ_atXwhuW5Dh1xLKUuCI3JSe5yvWEP0ZBKeyT9qXpCd6E\"}"}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c27bcd05-e0ba-4585-942b-bab8c03bc1ca","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"c27bcd05-e0ba-4585-942b-bab8c03bc1ca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c27bcd05-e0ba-4585-942b-bab8c03bc1ca","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f"}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f"}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f"}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"}
{"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"}
{"level":"error","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190"}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee"}
{"level":"info","ts":"2026-07-27T16:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d"}
{"level":"info","ts":"2026-07-27T16:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560"}
{"level":"info","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49294","PortSpecifier":{"PortValue":49294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-ffa17b.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49294","PortSpecifier":{"PortValue":49294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170552,"nanos":281264862},"http":{"id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","method":"POST","headers":{":authority":"e2e-ipp-a-ffa17b.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}}
{"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-ffa17b.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-ffa17b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41038","PortSpecifier":{"PortValue":41038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","method":"POST","path":"/ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b/v1/chat/completions","host":"e2e-ipp-a-ffa17b.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41038","PortSpecifier":{"PortValue":41038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170554,"nanos":344588978},"http":{"id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","method":"POST","headers":{":authority":"e2e-ipp-a-ffa17b.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3L1IP9oXUMksweTQ_L8Yr5dV4KFS5rbKsQ3uvsPA8odSPiXm4EEldN4Da8Xr"}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-ffa17b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3L1IP9oXUMksweTQ_L8Yr5dV4KFS5rbKsQ3uvsPA8odSPiXm4EEldN4Da8Xr\"}"}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-ffa17b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80b02e07-7727-47bb-9e07-2469db26cff3","keyName":"e2e-ipp-ffa17b","subscription":"ipp-route-ffa17b-sub","tenant":"e2e-ipp-a-ffa17b","userId":"80b02e07-7727-47bb-9e07-2469db26cff3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-ffa17b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b\",\"requestedSubscription\":\"ipp-route-ffa17b-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-ffa17b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-ffa17b/models/facebook/opt-125m","name":"ipp-route-ffa17b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-ffa17b-sub","namespace":"ai-tenant-e2e-ipp-a-ffa17b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b"}}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-ffa17b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-ffa17b-sub"}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80b02e07-7727-47bb-9e07-2469db26cff3","keyName":"e2e-ipp-ffa17b","selected_subscription":"ipp-route-ffa17b-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b-sub@ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-ffa17b/models/facebook/opt-125m","name":"ipp-route-ffa17b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-ffa17b-sub","namespace":"ai-tenant-e2e-ipp-a-ffa17b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d"}
{"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560"}