{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609c42831846d96b0e2502119adc8f9be1ebae7535a2effa3046ef55e0d7586e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609c42831846d96b0e2502119adc8f9be1ebae7535a2effa3046ef55e0d7586e"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609c42831846d96b0e2502119adc8f9be1ebae7535a2effa3046ef55e0d7586e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc55935a4c130002edf3a27748d5d700d8831f1978772f2f8e08f2cad006679f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc55935a4c130002edf3a27748d5d700d8831f1978772f2f8e08f2cad006679f"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc55935a4c130002edf3a27748d5d700d8831f1978772f2f8e08f2cad006679f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee27873ae134359dbb5da7c55ebd8e695fd9a21c44e23e95b4c7fb7fdc093269","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609c42831846d96b0e2502119adc8f9be1ebae7535a2effa3046ef55e0d7586e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609c42831846d96b0e2502119adc8f9be1ebae7535a2effa3046ef55e0d7586e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee27873ae134359dbb5da7c55ebd8e695fd9a21c44e23e95b4c7fb7fdc093269"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609c42831846d96b0e2502119adc8f9be1ebae7535a2effa3046ef55e0d7586e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc55935a4c130002edf3a27748d5d700d8831f1978772f2f8e08f2cad006679f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc55935a4c130002edf3a27748d5d700d8831f1978772f2f8e08f2cad006679f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609c42831846d96b0e2502119adc8f9be1ebae7535a2effa3046ef55e0d7586e"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc55935a4c130002edf3a27748d5d700d8831f1978772f2f8e08f2cad006679f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc55935a4c130002edf3a27748d5d700d8831f1978772f2f8e08f2cad006679f"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee27873ae134359dbb5da7c55ebd8e695fd9a21c44e23e95b4c7fb7fdc093269","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee27873ae134359dbb5da7c55ebd8e695fd9a21c44e23e95b4c7fb7fdc093269"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee27873ae134359dbb5da7c55ebd8e695fd9a21c44e23e95b4c7fb7fdc093269","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b16120a4e5d1787bf31cb1045353ce6f3e0b6e983af02f78375792765c15b2a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b16120a4e5d1787bf31cb1045353ce6f3e0b6e983af02f78375792765c15b2a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609c42831846d96b0e2502119adc8f9be1ebae7535a2effa3046ef55e0d7586e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc55935a4c130002edf3a27748d5d700d8831f1978772f2f8e08f2cad006679f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee27873ae134359dbb5da7c55ebd8e695fd9a21c44e23e95b4c7fb7fdc093269","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b16120a4e5d1787bf31cb1045353ce6f3e0b6e983af02f78375792765c15b2a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b16120a4e5d1787bf31cb1045353ce6f3e0b6e983af02f78375792765c15b2a7"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b16120a4e5d1787bf31cb1045353ce6f3e0b6e983af02f78375792765c15b2a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b16120a4e5d1787bf31cb1045353ce6f3e0b6e983af02f78375792765c15b2a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609c42831846d96b0e2502119adc8f9be1ebae7535a2effa3046ef55e0d7586e"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b16120a4e5d1787bf31cb1045353ce6f3e0b6e983af02f78375792765c15b2a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b16120a4e5d1787bf31cb1045353ce6f3e0b6e983af02f78375792765c15b2a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc55935a4c130002edf3a27748d5d700d8831f1978772f2f8e08f2cad006679f"}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322"}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee27873ae134359dbb5da7c55ebd8e695fd9a21c44e23e95b4c7fb7fdc093269"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b16120a4e5d1787bf31cb1045353ce6f3e0b6e983af02f78375792765c15b2a7"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b2c47420d40bc0a7fe5cafafa73be38319293512ae46b852628053fd6fc1ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b2c47420d40bc0a7fe5cafafa73be38319293512ae46b852628053fd6fc1ae"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b2c47420d40bc0a7fe5cafafa73be38319293512ae46b852628053fd6fc1ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b2c47420d40bc0a7fe5cafafa73be38319293512ae46b852628053fd6fc1ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b2c47420d40bc0a7fe5cafafa73be38319293512ae46b852628053fd6fc1ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b2c47420d40bc0a7fe5cafafa73be38319293512ae46b852628053fd6fc1ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b2c47420d40bc0a7fe5cafafa73be38319293512ae46b852628053fd6fc1ae"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b2c47420d40bc0a7fe5cafafa73be38319293512ae46b852628053fd6fc1ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83"}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83"}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83"}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"error","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37924","PortSpecifier":{"PortValue":37924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a46e023-805d-4606-a949-17d7b5bb1dda","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","object":"source:{address:{socket_address:{address:\"10.133.0.11:37924\"  port_value:37924}}}  destination:{address:{socket_address:{address:\"10.133.0.55:443\"  port_value:443}}}  request:{time:{seconds:1785950233  nanos:619800696}  http:{id:\"5a46e023-805d-4606-a949-17d7b5bb1dda\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"5a46e023-805d-4606-a949-17d7b5bb1dda\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"0635858fa15c9695040015c4cc8a00cc5d36b98118ce7820606ae8d213f02b18\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/893d8e929829"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e811f3f1-012d-459c-821c-96a32b9aea23"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edc5991f-e8a1-4f6a-b628-cd802e2e0541","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/893d8e929829"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e811f3f1-012d-459c-821c-96a32b9aea23"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edc5991f-e8a1-4f6a-b628-cd802e2e0541","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0635858fa15c9695040015c4cc8a00cc5d36b98118ce7820606ae8d213f02b18"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5a46e023-805d-4606-a949-17d7b5bb1dda"},"host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"5a46e023-805d-4606-a949-17d7b5bb1dda","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":619800696,"seconds":1785950233}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37924},"address":"10.133.0.11:37924"}}}}},"destination":{"address":"10.133.0.55:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"0635858fa15c9695040015c4cc8a00cc5d36b98118ce7820606ae8d213f02b18"},"headers":{":authority":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5a46e023-805d-4606-a949-17d7b5bb1dda"},"host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"5a46e023-805d-4606-a949-17d7b5bb1dda","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":619800696,"seconds":1785950233},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:37924","port":37924}}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-02b433/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a46e023-805d-4606-a949-17d7b5bb1dda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51448","PortSpecifier":{"PortValue":51448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d47a97ed-15eb-439b-a387-2859a8531c1b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","object":"source:{address:{socket_address:{address:\"10.133.0.11:51448\"  port_value:51448}}}  destination:{address:{socket_address:{address:\"10.133.0.56:443\"  port_value:443}}}  request:{time:{seconds:1785950233  nanos:659148205}  http:{id:\"d47a97ed-15eb-439b-a387-2859a8531c1b\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-46e6bf.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.56~e2e-shared-b-46e6bf-openshift-default-6b97c6bcfb-kdlrp.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"d47a97ed-15eb-439b-a387-2859a8531c1b\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"36f5a3edf126826eda8e258bda09b5cb1fd7072a78d0b763dfc1e92dcd9b031f\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/893d8e929829"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e811f3f1-012d-459c-821c-96a32b9aea23"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edc5991f-e8a1-4f6a-b628-cd802e2e0541","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/893d8e929829"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e811f3f1-012d-459c-821c-96a32b9aea23"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edc5991f-e8a1-4f6a-b628-cd802e2e0541","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36f5a3edf126826eda8e258bda09b5cb1fd7072a78d0b763dfc1e92dcd9b031f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-46e6bf.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-b-46e6bf-openshift-default-6b97c6bcfb-kdlrp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d47a97ed-15eb-439b-a387-2859a8531c1b"},"host":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"d47a97ed-15eb-439b-a387-2859a8531c1b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":659148205,"seconds":1785950233}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51448},"address":"10.133.0.11:51448"}}}}},"destination":{"address":"10.133.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"36f5a3edf126826eda8e258bda09b5cb1fd7072a78d0b763dfc1e92dcd9b031f"},"headers":{":authority":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-46e6bf.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-b-46e6bf-openshift-default-6b97c6bcfb-kdlrp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d47a97ed-15eb-439b-a387-2859a8531c1b"},"host":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"d47a97ed-15eb-439b-a387-2859a8531c1b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":659148205,"seconds":1785950233},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:51448","port":51448}}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-46e6bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d47a97ed-15eb-439b-a387-2859a8531c1b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37936","PortSpecifier":{"PortValue":37936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","method":"POST","path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","object":"source:{address:{socket_address:{address:\"10.133.0.11:37936\"  port_value:37936}}}  destination:{address:{socket_address:{address:\"10.133.0.55:443\"  port_value:443}}}  request:{time:{seconds:1785950233  nanos:700785593}  http:{id:\"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-02b433-kserve-workload-svc.ai-tenant-e2e-shared-a-02b433.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0wMmI0MzMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTAyYjQzMy1vcGVuc2hpZnQtZGVmYXVsdC04NmJmOGRjN2ZiLTltOWt3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTAyYjQzMy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0wMmI0MzMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5\"}  path:\"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions\"  host:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"f18ecc99eda8de5529c6ce8a99e694e6c13aca70248d7bfad46a41b7361932d1\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4U8CLirchnPT7eTf_6vcIxCx4yFSZ9jcViKJA2AJkDo962MG3MC67W8p8Hty"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c3a001e5-a923-4883-8470-1ada198e8f23","keyName":"e2e-rate-a-786420","subscription":"e2e-rate-iso-a-786420","tenant":"e2e-shared-a-02b433","userId":"c3a001e5-a923-4883-8470-1ada198e8f23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-02b433/models/facebook/opt-125m","name":"rate-test-model-02b433","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-786420","namespace":"ai-tenant-e2e-shared-a-02b433","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433"}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-02b433-kserve-workload-svc.ai-tenant-e2e-shared-a-02b433.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5"},"host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","method":"POST","path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":700785593,"seconds":1785950233}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37936},"address":"10.133.0.11:37936"}}}}},"destination":{"address":"10.133.0.55:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f18ecc99eda8de5529c6ce8a99e694e6c13aca70248d7bfad46a41b7361932d1"},"headers":{":authority":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-02b433-kserve-workload-svc.ai-tenant-e2e-shared-a-02b433.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5"},"host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","method":"POST","path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":700785593,"seconds":1785950233},"url_path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:37936","port":37936}}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-02b433/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-786420"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c3a001e5-a923-4883-8470-1ada198e8f23","keyName":"e2e-rate-a-786420","selected_subscription":"e2e-rate-iso-a-786420","selected_subscription_key":"ai-tenant-e2e-shared-a-02b433/e2e-rate-iso-a-786420@ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-02b433/models/facebook/opt-125m","name":"rate-test-model-02b433","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-786420","namespace":"ai-tenant-e2e-shared-a-02b433","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T17:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb192dc6-1fc5-4dfc-997a-2d7063fb57e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37556","PortSpecifier":{"PortValue":37556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","method":"POST","path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","object":"source:{address:{socket_address:{address:\"10.133.0.11:37556\"  port_value:37556}}}  destination:{address:{socket_address:{address:\"10.133.0.55:443\"  port_value:443}}}  request:{time:{seconds:1785950234  nanos:741593406}  http:{id:\"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-02b433-kserve-workload-svc.ai-tenant-e2e-shared-a-02b433.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7\"}  path:\"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions\"  host:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"f18ecc99eda8de5529c6ce8a99e694e6c13aca70248d7bfad46a41b7361932d1\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4U8CLirchnPT7eTf_6vcIxCx4yFSZ9jcViKJA2AJkDo962MG3MC67W8p8Hty"}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c3a001e5-a923-4883-8470-1ada198e8f23","keyName":"e2e-rate-a-786420","subscription":"e2e-rate-iso-a-786420","tenant":"e2e-shared-a-02b433","userId":"c3a001e5-a923-4883-8470-1ada198e8f23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-02b433/models/facebook/opt-125m","name":"rate-test-model-02b433","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-786420","namespace":"ai-tenant-e2e-shared-a-02b433","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433"}}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-02b433-kserve-workload-svc.ai-tenant-e2e-shared-a-02b433.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7"},"host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","method":"POST","path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":741593406,"seconds":1785950234}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37556},"address":"10.133.0.11:37556"}}}}},"destination":{"address":"10.133.0.55:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f18ecc99eda8de5529c6ce8a99e694e6c13aca70248d7bfad46a41b7361932d1"},"headers":{":authority":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-02b433-kserve-workload-svc.ai-tenant-e2e-shared-a-02b433.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7"},"host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","method":"POST","path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":741593406,"seconds":1785950234},"url_path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:37556","port":37556}}}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-02b433/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-786420"}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c3a001e5-a923-4883-8470-1ada198e8f23","keyName":"e2e-rate-a-786420","selected_subscription":"e2e-rate-iso-a-786420","selected_subscription_key":"ai-tenant-e2e-shared-a-02b433/e2e-rate-iso-a-786420@ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-02b433/models/facebook/opt-125m","name":"rate-test-model-02b433","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-786420","namespace":"ai-tenant-e2e-shared-a-02b433","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T17:17:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1269eb2b-d16f-4561-b785-e1dd5a4f9ba7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37568","PortSpecifier":{"PortValue":37568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a21c44d-51bd-419b-a299-56b4307664a1","method":"POST","path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","object":"source:{address:{socket_address:{address:\"10.133.0.11:37568\"  port_value:37568}}}  destination:{address:{socket_address:{address:\"10.133.0.55:443\"  port_value:443}}}  request:{time:{seconds:1785950235  nanos:778636172}  http:{id:\"1a21c44d-51bd-419b-a299-56b4307664a1\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-02b433-kserve-workload-svc.ai-tenant-e2e-shared-a-02b433.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"1a21c44d-51bd-419b-a299-56b4307664a1\"}  path:\"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions\"  host:\"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"f18ecc99eda8de5529c6ce8a99e694e6c13aca70248d7bfad46a41b7361932d1\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4U8CLirchnPT7eTf_6vcIxCx4yFSZ9jcViKJA2AJkDo962MG3MC67W8p8Hty"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c3a001e5-a923-4883-8470-1ada198e8f23","keyName":"e2e-rate-a-786420","subscription":"e2e-rate-iso-a-786420","tenant":"e2e-shared-a-02b433","userId":"c3a001e5-a923-4883-8470-1ada198e8f23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-02b433.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-02b433/models/facebook/opt-125m","name":"rate-test-model-02b433","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-786420","namespace":"ai-tenant-e2e-shared-a-02b433","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433"}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-02b433-kserve-workload-svc.ai-tenant-e2e-shared-a-02b433.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1a21c44d-51bd-419b-a299-56b4307664a1"},"host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"1a21c44d-51bd-419b-a299-56b4307664a1","method":"POST","path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":778636172,"seconds":1785950235}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37568},"address":"10.133.0.11:37568"}}}}},"destination":{"address":"10.133.0.55:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f18ecc99eda8de5529c6ce8a99e694e6c13aca70248d7bfad46a41b7361932d1"},"headers":{":authority":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-02b433-kserve-workload-svc.ai-tenant-e2e-shared-a-02b433.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0wMmI0MzMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTAyYjQzMy1vcGVuc2hpZnQtZGVmYXVsdC04NmJmOGRjN2ZiLTltOWt3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTAyYjQzMy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0wMmI0MzMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.55~e2e-shared-a-02b433-openshift-default-86bf8dc7fb-9m9kw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1a21c44d-51bd-419b-a299-56b4307664a1"},"host":"e2e-shared-a-02b433.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"1a21c44d-51bd-419b-a299-56b4307664a1","method":"POST","path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":778636172,"seconds":1785950235},"url_path":"/ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:37568","port":37568}}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-02b433/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-786420"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c3a001e5-a923-4883-8470-1ada198e8f23","keyName":"e2e-rate-a-786420","selected_subscription":"e2e-rate-iso-a-786420","selected_subscription_key":"ai-tenant-e2e-shared-a-02b433/e2e-rate-iso-a-786420@ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-02b433/models/facebook/opt-125m","name":"rate-test-model-02b433","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-786420","namespace":"ai-tenant-e2e-shared-a-02b433","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-02b433/rate-test-model-02b433"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a21c44d-51bd-419b-a299-56b4307664a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:45566","PortSpecifier":{"PortValue":45566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","method":"POST","path":"/ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf/v1/completions","host":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","object":"source:{address:{socket_address:{address:\"10.133.0.11:45566\"  port_value:45566}}}  destination:{address:{socket_address:{address:\"10.133.0.56:443\"  port_value:443}}}  request:{time:{seconds:1785950235  nanos:815299504}  http:{id:\"54a56d88-4be0-4b45-bb98-c3bc2084950f\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-46e6bf-kserve-workload-svc.ai-tenant-e2e-shared-b-46e6bf.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.56~e2e-shared-b-46e6bf-openshift-default-6b97c6bcfb-kdlrp.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"54a56d88-4be0-4b45-bb98-c3bc2084950f\"}  path:\"/ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf/v1/completions\"  host:\"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1a2i6TK1QcdDa5zIO_e59SBCV6VLFSNIxkdYN3kXwWefoUTbmhqCUidu74Wdi"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-46e6bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-46e6bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"457d57c0-26e5-4d1a-9f39-06a387ff7658","keyName":"e2e-rate-b-786420","subscription":"e2e-rate-iso-b-786420","tenant":"e2e-shared-b-46e6bf","userId":"457d57c0-26e5-4d1a-9f39-06a387ff7658","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-46e6bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-46e6bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-46e6bf/models/facebook/opt-125m","name":"rate-test-model-46e6bf","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-786420","namespace":"ai-tenant-e2e-shared-b-46e6bf","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf"}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-46e6bf-kserve-workload-svc.ai-tenant-e2e-shared-b-46e6bf.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-b-46e6bf-openshift-default-6b97c6bcfb-kdlrp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"54a56d88-4be0-4b45-bb98-c3bc2084950f"},"host":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","method":"POST","path":"/ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":815299504,"seconds":1785950235}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":45566},"address":"10.133.0.11:45566"}}}}},"destination":{"address":"10.133.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322"},"headers":{":authority":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-46e6bf-kserve-workload-svc.ai-tenant-e2e-shared-b-46e6bf.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi00NmU2YmYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTQ2ZTZiZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk3YzZiY2ZiLWtkbHJwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTQ2ZTZiZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi00NmU2YmYtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-b-46e6bf-openshift-default-6b97c6bcfb-kdlrp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"54a56d88-4be0-4b45-bb98-c3bc2084950f"},"host":"e2e-shared-b-46e6bf.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","method":"POST","path":"/ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":815299504,"seconds":1785950235},"url_path":"/ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:45566","port":45566}}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-46e6bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-786420"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"457d57c0-26e5-4d1a-9f39-06a387ff7658","keyName":"e2e-rate-b-786420","selected_subscription":"e2e-rate-iso-b-786420","selected_subscription_key":"ai-tenant-e2e-shared-b-46e6bf/e2e-rate-iso-b-786420@ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-46e6bf/models/facebook/opt-125m","name":"rate-test-model-46e6bf","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-786420","namespace":"ai-tenant-e2e-shared-b-46e6bf","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-46e6bf/rate-test-model-46e6bf"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T17:17:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54a56d88-4be0-4b45-bb98-c3bc2084950f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65f1d3cdbb20a8f111ee916a1e9797b459f12028c95d4ee34f69a30d550c8623"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f18ecc99eda8de5529c6ce8a99e694e6c13aca70248d7bfad46a41b7361932d1"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da02c11ba3ce661c9faf80c64b7d75f5fa8f611a405a0af96b16ee532f362fbc"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/609c42831846d96b0e2502119adc8f9be1ebae7535a2effa3046ef55e0d7586e"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36f5a3edf126826eda8e258bda09b5cb1fd7072a78d0b763dfc1e92dcd9b031f"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a752cc029481571a7d819e3062c07414b923db595ff1935f4f0f14bccc4b70ea"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d24b9e695a1119c3a930a9a8158799c4dbf0eac304701eb270dd74a16a27967"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b16120a4e5d1787bf31cb1045353ce6f3e0b6e983af02f78375792765c15b2a7"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc55935a4c130002edf3a27748d5d700d8831f1978772f2f8e08f2cad006679f"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fe4001d4a96f6201107f9286c13ad952344fb41aa54e9909b3c242583dbc5d0"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2d24a032793814ca67c11674025d248b068d436205b2e83bce2145126a97d68"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee27873ae134359dbb5da7c55ebd8e695fd9a21c44e23e95b4c7fb7fdc093269"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34a95b43efe24df3d4a764b6be6ea4d9d2212ed1fba3234d7c57d81f1b221d94"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c72e578c03d30ff276a1623b9f9d686db35f669685d705bf668bb241f16d322"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0635858fa15c9695040015c4cc8a00cc5d36b98118ce7820606ae8d213f02b18"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1db8c902d25c087baa520e30756a744ea97a0c84a3a1f8c16b45cec01976dffe"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4832a2331d9e8cdde825f04ecec9f3654416f03ce63284ec4483452ce2028fba"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7dbd2619a230769d0647f0112224fd54dac0e867cf9076886c9bbaee7653c00"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8b2c47420d40bc0a7fe5cafafa73be38319293512ae46b852628053fd6fc1ae"}
{"level":"info","ts":"2026-08-05T17:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f51b47c041b52f54a9d63439981a8998269ea2cb23818c0a6eb4ecd565a8ca4"}
{"level":"info","ts":"2026-08-05T17:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e80bf67c8856edbf5bfe1990afe8da6328190bfc980003e4f6ef16dff6748b83"}
{"level":"info","ts":"2026-08-05T17:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d318f226352c572cd49b8191bb2ce98e40b9d87b4600f02d8966442d92959ec0"}
{"level":"info","ts":"2026-08-05T17:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/240165f4884ece9df310d46e71f298342f7ee3751d13ccc765779fb139027fc4"}
{"level":"info","ts":"2026-08-05T17:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b2415a2dc1d78dce1eb168c671c933ad4cfa4558a42843d812feb5589fc80ba"}
{"level":"info","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36722","PortSpecifier":{"PortValue":36722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","object":"source:{address:{socket_address:{address:\"10.133.0.11:36722\"  port_value:36722}}}  destination:{address:{socket_address:{address:\"10.133.0.25:443\"  port_value:443}}}  request:{time:{seconds:1785950317  nanos:575085144}  http:{id:\"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"69\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXg3bGxqCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.25~maas-default-gateway-openshift-default-78bb78ff78-x7llj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8\"}  path:\"/maas-api/v1/api-keys\"  host:\"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/893d8e929829"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e811f3f1-012d-459c-821c-96a32b9aea23"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edc5991f-e8a1-4f6a-b628-cd802e2e0541","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/893d8e929829"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e811f3f1-012d-459c-821c-96a32b9aea23"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edc5991f-e8a1-4f6a-b628-cd802e2e0541","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-78bb78ff78-x7llj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8"},"host":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":575085144,"seconds":1785950317}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36722},"address":"10.133.0.11:36722"}}}}},"destination":{"address":"10.133.0.25:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXg3bGxqCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-78bb78ff78-x7llj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8"},"host":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":575085144,"seconds":1785950317},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:36722","port":36722}}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbc51ad7-ae18-4dfd-ae8b-526eb4a0f7a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36734","PortSpecifier":{"PortValue":36734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","object":"source:{address:{socket_address:{address:\"10.133.0.11:36734\"  port_value:36734}}}  destination:{address:{socket_address:{address:\"10.133.0.25:443\"  port_value:443}}}  request:{time:{seconds:1785950317  nanos:617653215}  http:{id:\"0d7d337b-d4b0-4e64-8aa7-b15d759a8444\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXg3bGxqCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.25~maas-default-gateway-openshift-default-78bb78ff78-x7llj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"0d7d337b-d4b0-4e64-8aa7-b15d759a8444\"}  path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"  host:\"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OEnIV5lY0PXBDQbU_aeWf0jBz5NoGXygZWFz2RuwUzeh0XSG0OfTG16F4kD4"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a2e803c2-1659-4c29-b997-db2a464d2f3f","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"a2e803c2-1659-4c29-b997-db2a464d2f3f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXg3bGxqCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-78bb78ff78-x7llj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444"},"host":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":617653215,"seconds":1785950317}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36734},"address":"10.133.0.11:36734"}}}}},"destination":{"address":"10.133.0.25:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-78bb78ff78-x7llj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444"},"host":"maas.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":617653215,"seconds":1785950317},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:36734","port":36734}}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a2e803c2-1659-4c29-b997-db2a464d2f3f","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T17:18:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d7d337b-d4b0-4e64-8aa7-b15d759a8444","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154"}
{"level":"debug","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154"}
{"level":"debug","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586"}
{"level":"debug","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586"}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027"}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c"}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb"}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb1485172a0cf4e6578df94d9be02fe7d3990d40d814ad6b24008ff4451742a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb1485172a0cf4e6578df94d9be02fe7d3990d40d814ad6b24008ff4451742a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb1485172a0cf4e6578df94d9be02fe7d3990d40d814ad6b24008ff4451742a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb1485172a0cf4e6578df94d9be02fe7d3990d40d814ad6b24008ff4451742a1"}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb1485172a0cf4e6578df94d9be02fe7d3990d40d814ad6b24008ff4451742a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb1485172a0cf4e6578df94d9be02fe7d3990d40d814ad6b24008ff4451742a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb1485172a0cf4e6578df94d9be02fe7d3990d40d814ad6b24008ff4451742a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb1485172a0cf4e6578df94d9be02fe7d3990d40d814ad6b24008ff4451742a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb"}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb1485172a0cf4e6578df94d9be02fe7d3990d40d814ad6b24008ff4451742a1"}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d"}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85"}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85"}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85"}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T17:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T17:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85"}
{"level":"info","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33804","PortSpecifier":{"PortValue":33804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e1facf1-0041-483e-9aaa-71070f47d87f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","object":"source:{address:{socket_address:{address:\"10.133.0.11:33804\"  port_value:33804}}}  destination:{address:{socket_address:{address:\"10.133.0.61:443\"  port_value:443}}}  request:{time:{seconds:1785950365  nanos:421927105}  http:{id:\"0e1facf1-0041-483e-9aaa-71070f47d87f\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-ipp-a-b2b0ab.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.61~e2e-ipp-a-b2b0ab-openshift-default-ff97cd6dd-8jzq7.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"0e1facf1-0041-483e-9aaa-71070f47d87f\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/893d8e929829"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e811f3f1-012d-459c-821c-96a32b9aea23"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edc5991f-e8a1-4f6a-b628-cd802e2e0541","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/893d8e929829"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e811f3f1-012d-459c-821c-96a32b9aea23"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"edc5991f-e8a1-4f6a-b628-cd802e2e0541","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-b2b0ab.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.61~e2e-ipp-a-b2b0ab-openshift-default-ff97cd6dd-8jzq7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0e1facf1-0041-483e-9aaa-71070f47d87f"},"host":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"0e1facf1-0041-483e-9aaa-71070f47d87f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":421927105,"seconds":1785950365}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33804},"address":"10.133.0.11:33804"}}}}},"destination":{"address":"10.133.0.61:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be"},"headers":{":authority":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-b2b0ab.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.61~e2e-ipp-a-b2b0ab-openshift-default-ff97cd6dd-8jzq7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0e1facf1-0041-483e-9aaa-71070f47d87f"},"host":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"0e1facf1-0041-483e-9aaa-71070f47d87f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":421927105,"seconds":1785950365},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:33804","port":33804}}}
{"level":"debug","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-b2b0ab/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T17:19:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e1facf1-0041-483e-9aaa-71070f47d87f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33820","PortSpecifier":{"PortValue":33820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","method":"POST","path":"/ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab/v1/chat/completions","host":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","object":"source:{address:{socket_address:{address:\"10.133.0.11:33820\"  port_value:33820}}}  destination:{address:{socket_address:{address:\"10.133.0.61:443\"  port_value:443}}}  request:{time:{seconds:1785950367  nanos:486127170}  http:{id:\"56f400fe-5db9-4bd1-b9bd-3a498490e58f\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"ipp-route-b2b0ab-kserve-workload-svc.ai-tenant-e2e-ipp-a-b2b0ab.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.61~e2e-ipp-a-b2b0ab-openshift-default-ff97cd6dd-8jzq7.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"56f400fe-5db9-4bd1-b9bd-3a498490e58f\"}  path:\"/ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab/v1/chat/completions\"  host:\"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-69usjsXhQYoP2jUl_5ivZPjEl9tmIhkK4QKIV6IErSYJhqh2uyVsFFzcBmdj"}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-b2b0ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-b2b0ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"15d602d4-0aea-4fd6-98c0-3ac485ece298","keyName":"e2e-ipp-b2b0ab","subscription":"ipp-route-b2b0ab-sub","tenant":"e2e-ipp-a-b2b0ab","userId":"15d602d4-0aea-4fd6-98c0-3ac485ece298","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-b2b0ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-b2b0ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-b2b0ab/models/facebook/opt-125m","name":"ipp-route-b2b0ab","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-b2b0ab-sub","namespace":"ai-tenant-e2e-ipp-a-b2b0ab","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab"}}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-b2b0ab-kserve-workload-svc.ai-tenant-e2e-ipp-a-b2b0ab.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.61~e2e-ipp-a-b2b0ab-openshift-default-ff97cd6dd-8jzq7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f"},"host":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","method":"POST","path":"/ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":486127170,"seconds":1785950367}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33820},"address":"10.133.0.11:33820"}}}}},"destination":{"address":"10.133.0.61:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d"},"headers":{":authority":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-b2b0ab-kserve-workload-svc.ai-tenant-e2e-ipp-a-b2b0ab.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.61~e2e-ipp-a-b2b0ab-openshift-default-ff97cd6dd-8jzq7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f"},"host":"e2e-ipp-a-b2b0ab.apps.e513956b-876f-4af7-bcf7-893d8e929829.prod.konfluxeaas.com","id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","method":"POST","path":"/ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":486127170,"seconds":1785950367},"url_path":"/ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:33820","port":33820}}}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-b2b0ab/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-b2b0ab-sub"}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"15d602d4-0aea-4fd6-98c0-3ac485ece298","keyName":"e2e-ipp-b2b0ab","selected_subscription":"ipp-route-b2b0ab-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab-sub@ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-b2b0ab/models/facebook/opt-125m","name":"ipp-route-b2b0ab","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-b2b0ab-sub","namespace":"ai-tenant-e2e-ipp-a-b2b0ab","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-b2b0ab/ipp-route-b2b0ab"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T17:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56f400fe-5db9-4bd1-b9bd-3a498490e58f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e380a15f852143b1d3cbd36234cb02b0c6f96a598cc7a1ee24dd06767e4f6a85"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/631e149a5171d3ead237d3a044a7c96223c27c609526e41708ed48ddad174d10"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/352ce6a038f9fec06ac92adcacd2d8429a5348a2417da03280f25ac9cf89ab3e"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07fd4c57640bbe65297ae9769bd5c506174c0c89065cd7351e09c765069425be"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ed8a2b45b11589f4725aa5e2308715699ed21b13e0e655699b74ae9eb01e027"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1701100a3ce6936610976982fcc5b20f37c2bd00b6d306f6adbec4e561b6512c"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8abaa7e229c8b5fc43a5a652aed1650453760afbf1269f32b8a8a02b3400e154"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb1485172a0cf4e6578df94d9be02fe7d3990d40d814ad6b24008ff4451742a1"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edca078be1e8f393ed054507a3f6279b7883f78d0bd0c764174665334889143a"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2fb51d2455c8a5cf043ebda2a9674170f876b278f45dae3c4a7a0b547e30edb"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16a76aced6b6bf5797a48cddb1848209360a59d42632a9e2e430b297943fbb5d"}
{"level":"info","ts":"2026-08-05T17:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e53a5bbb6320f4fef9a8af2ce089fac68df2a573dc71d55e19580a53f2841586"}