{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef"}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef"}
{"level":"error","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"error","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef"}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b"}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b"}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b"}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22987d497d49d185b8e1840dfaca0b7cc76d7f7d865e02d605f6944ab27f5387"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22987d497d49d185b8e1840dfaca0b7cc76d7f7d865e02d605f6944ab27f5387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22987d497d49d185b8e1840dfaca0b7cc76d7f7d865e02d605f6944ab27f5387"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22987d497d49d185b8e1840dfaca0b7cc76d7f7d865e02d605f6944ab27f5387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22987d497d49d185b8e1840dfaca0b7cc76d7f7d865e02d605f6944ab27f5387"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22987d497d49d185b8e1840dfaca0b7cc76d7f7d865e02d605f6944ab27f5387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ad2438d0f6825e572db88b2b125c40c534503ddbf6f7f68a584936373c335a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ad2438d0f6825e572db88b2b125c40c534503ddbf6f7f68a584936373c335a"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ad2438d0f6825e572db88b2b125c40c534503ddbf6f7f68a584936373c335a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ad2438d0f6825e572db88b2b125c40c534503ddbf6f7f68a584936373c335a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ad2438d0f6825e572db88b2b125c40c534503ddbf6f7f68a584936373c335a"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ad2438d0f6825e572db88b2b125c40c534503ddbf6f7f68a584936373c335a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ad2438d0f6825e572db88b2b125c40c534503ddbf6f7f68a584936373c335a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ad2438d0f6825e572db88b2b125c40c534503ddbf6f7f68a584936373c335a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ad2438d0f6825e572db88b2b125c40c534503ddbf6f7f68a584936373c335a"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ad2438d0f6825e572db88b2b125c40c534503ddbf6f7f68a584936373c335a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6db068ae81272e8ddde20e03ec44bc8ba7ff5b007baa172eb7b6e8ddf495081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6db068ae81272e8ddde20e03ec44bc8ba7ff5b007baa172eb7b6e8ddf495081"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6db068ae81272e8ddde20e03ec44bc8ba7ff5b007baa172eb7b6e8ddf495081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610dc09280ebf5d621d91a9d392e1d3d77f65832747a21e0378e71daf1696b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610dc09280ebf5d621d91a9d392e1d3d77f65832747a21e0378e71daf1696b19"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6db068ae81272e8ddde20e03ec44bc8ba7ff5b007baa172eb7b6e8ddf495081"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610dc09280ebf5d621d91a9d392e1d3d77f65832747a21e0378e71daf1696b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6db068ae81272e8ddde20e03ec44bc8ba7ff5b007baa172eb7b6e8ddf495081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6db068ae81272e8ddde20e03ec44bc8ba7ff5b007baa172eb7b6e8ddf495081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03b339d89208dcd334b10ee2d84e95c90822a0c75a06c0c4dcfac727c088d792"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610dc09280ebf5d621d91a9d392e1d3d77f65832747a21e0378e71daf1696b19"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6db068ae81272e8ddde20e03ec44bc8ba7ff5b007baa172eb7b6e8ddf495081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03b339d89208dcd334b10ee2d84e95c90822a0c75a06c0c4dcfac727c088d792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03b339d89208dcd334b10ee2d84e95c90822a0c75a06c0c4dcfac727c088d792"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d8f535949bdbf834ffe094ff0d4c8be55a209c8923b64ca1a5bfd012abcf519"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6db068ae81272e8ddde20e03ec44bc8ba7ff5b007baa172eb7b6e8ddf495081"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03b339d89208dcd334b10ee2d84e95c90822a0c75a06c0c4dcfac727c088d792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610dc09280ebf5d621d91a9d392e1d3d77f65832747a21e0378e71daf1696b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610dc09280ebf5d621d91a9d392e1d3d77f65832747a21e0378e71daf1696b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7cef01ab776f4b63b0d2b994b31541615269380af8bf651a3d263bf3c24519"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03b339d89208dcd334b10ee2d84e95c90822a0c75a06c0c4dcfac727c088d792"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610dc09280ebf5d621d91a9d392e1d3d77f65832747a21e0378e71daf1696b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d8f535949bdbf834ffe094ff0d4c8be55a209c8923b64ca1a5bfd012abcf519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d8f535949bdbf834ffe094ff0d4c8be55a209c8923b64ca1a5bfd012abcf519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ffb4ad9061b71ebc77ba8e424687745738382df6fad22aeb7a5799e3378465"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca911997675ecab275dd7c218bc1bba7bea6923b84e140810152fe060a186fa6"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d8f535949bdbf834ffe094ff0d4c8be55a209c8923b64ca1a5bfd012abcf519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6db068ae81272e8ddde20e03ec44bc8ba7ff5b007baa172eb7b6e8ddf495081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7cef01ab776f4b63b0d2b994b31541615269380af8bf651a3d263bf3c24519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7cef01ab776f4b63b0d2b994b31541615269380af8bf651a3d263bf3c24519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610dc09280ebf5d621d91a9d392e1d3d77f65832747a21e0378e71daf1696b19"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cb98a9decbff6d5d9252c21016e0174803f84b8f5b023b9a9a0b14d2864b4d3"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d8f535949bdbf834ffe094ff0d4c8be55a209c8923b64ca1a5bfd012abcf519"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7cef01ab776f4b63b0d2b994b31541615269380af8bf651a3d263bf3c24519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03b339d89208dcd334b10ee2d84e95c90822a0c75a06c0c4dcfac727c088d792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ffb4ad9061b71ebc77ba8e424687745738382df6fad22aeb7a5799e3378465","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99ffb4ad9061b71ebc77ba8e424687745738382df6fad22aeb7a5799e3378465"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b509fa331a8234c7d7ce0130ad2de401a0bdfe2d8c8b1814afff0bedbb275d7f"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d4053fee40edf47770484d84fa57105cc807b0f75941e135a20237328a6dde3"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ffb4ad9061b71ebc77ba8e424687745738382df6fad22aeb7a5799e3378465","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca911997675ecab275dd7c218bc1bba7bea6923b84e140810152fe060a186fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca911997675ecab275dd7c218bc1bba7bea6923b84e140810152fe060a186fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc24d02be49d146285e350d3d3f5c8ea99e92ad59b836c2ed93178004ceae2ac"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7cef01ab776f4b63b0d2b994b31541615269380af8bf651a3d263bf3c24519"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca911997675ecab275dd7c218bc1bba7bea6923b84e140810152fe060a186fa6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dba06d1aa9fc0bbf0f002750f9e6c89631b818eccc389b842eceda8e0d15213"}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610dc09280ebf5d621d91a9d392e1d3d77f65832747a21e0378e71daf1696b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cb98a9decbff6d5d9252c21016e0174803f84b8f5b023b9a9a0b14d2864b4d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cb98a9decbff6d5d9252c21016e0174803f84b8f5b023b9a9a0b14d2864b4d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eca06ccec88db1fc30e37b6607b8b7d511e94255fabceac81450f3ea624354a"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ffb4ad9061b71ebc77ba8e424687745738382df6fad22aeb7a5799e3378465"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cb98a9decbff6d5d9252c21016e0174803f84b8f5b023b9a9a0b14d2864b4d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d8f535949bdbf834ffe094ff0d4c8be55a209c8923b64ca1a5bfd012abcf519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b509fa331a8234c7d7ce0130ad2de401a0bdfe2d8c8b1814afff0bedbb275d7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b509fa331a8234c7d7ce0130ad2de401a0bdfe2d8c8b1814afff0bedbb275d7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b509fa331a8234c7d7ce0130ad2de401a0bdfe2d8c8b1814afff0bedbb275d7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d4053fee40edf47770484d84fa57105cc807b0f75941e135a20237328a6dde3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d4053fee40edf47770484d84fa57105cc807b0f75941e135a20237328a6dde3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2faf99c9074e60640ca1dc561656870002215f6dc729a319bde782261dd55ae9"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cafc082232bc281bbf9e17de589078beb6a1441b33c3240deda2e600396253cf"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca911997675ecab275dd7c218bc1bba7bea6923b84e140810152fe060a186fa6"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d4053fee40edf47770484d84fa57105cc807b0f75941e135a20237328a6dde3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc24d02be49d146285e350d3d3f5c8ea99e92ad59b836c2ed93178004ceae2ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc24d02be49d146285e350d3d3f5c8ea99e92ad59b836c2ed93178004ceae2ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3b6c9cbf97be735f1ab002937cf8a13e3df935c929c6453b87b7a7f8f3fbd84"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc24d02be49d146285e350d3d3f5c8ea99e92ad59b836c2ed93178004ceae2ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7cef01ab776f4b63b0d2b994b31541615269380af8bf651a3d263bf3c24519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dba06d1aa9fc0bbf0f002750f9e6c89631b818eccc389b842eceda8e0d15213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dba06d1aa9fc0bbf0f002750f9e6c89631b818eccc389b842eceda8e0d15213"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cb98a9decbff6d5d9252c21016e0174803f84b8f5b023b9a9a0b14d2864b4d3"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b509fa331a8234c7d7ce0130ad2de401a0bdfe2d8c8b1814afff0bedbb275d7f"}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dba06d1aa9fc0bbf0f002750f9e6c89631b818eccc389b842eceda8e0d15213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eca06ccec88db1fc30e37b6607b8b7d511e94255fabceac81450f3ea624354a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eca06ccec88db1fc30e37b6607b8b7d511e94255fabceac81450f3ea624354a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d4053fee40edf47770484d84fa57105cc807b0f75941e135a20237328a6dde3"}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc24d02be49d146285e350d3d3f5c8ea99e92ad59b836c2ed93178004ceae2ac"}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eca06ccec88db1fc30e37b6607b8b7d511e94255fabceac81450f3ea624354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99ffb4ad9061b71ebc77ba8e424687745738382df6fad22aeb7a5799e3378465","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2faf99c9074e60640ca1dc561656870002215f6dc729a319bde782261dd55ae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2faf99c9074e60640ca1dc561656870002215f6dc729a319bde782261dd55ae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dba06d1aa9fc0bbf0f002750f9e6c89631b818eccc389b842eceda8e0d15213"}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eca06ccec88db1fc30e37b6607b8b7d511e94255fabceac81450f3ea624354a"}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2faf99c9074e60640ca1dc561656870002215f6dc729a319bde782261dd55ae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cafc082232bc281bbf9e17de589078beb6a1441b33c3240deda2e600396253cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cafc082232bc281bbf9e17de589078beb6a1441b33c3240deda2e600396253cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2faf99c9074e60640ca1dc561656870002215f6dc729a319bde782261dd55ae9"}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cafc082232bc281bbf9e17de589078beb6a1441b33c3240deda2e600396253cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca911997675ecab275dd7c218bc1bba7bea6923b84e140810152fe060a186fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3b6c9cbf97be735f1ab002937cf8a13e3df935c929c6453b87b7a7f8f3fbd84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3b6c9cbf97be735f1ab002937cf8a13e3df935c929c6453b87b7a7f8f3fbd84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cafc082232bc281bbf9e17de589078beb6a1441b33c3240deda2e600396253cf"}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3b6c9cbf97be735f1ab002937cf8a13e3df935c929c6453b87b7a7f8f3fbd84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3b6c9cbf97be735f1ab002937cf8a13e3df935c929c6453b87b7a7f8f3fbd84"}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cb98a9decbff6d5d9252c21016e0174803f84b8f5b023b9a9a0b14d2864b4d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b509fa331a8234c7d7ce0130ad2de401a0bdfe2d8c8b1814afff0bedbb275d7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d4053fee40edf47770484d84fa57105cc807b0f75941e135a20237328a6dde3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc24d02be49d146285e350d3d3f5c8ea99e92ad59b836c2ed93178004ceae2ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dba06d1aa9fc0bbf0f002750f9e6c89631b818eccc389b842eceda8e0d15213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eca06ccec88db1fc30e37b6607b8b7d511e94255fabceac81450f3ea624354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2faf99c9074e60640ca1dc561656870002215f6dc729a319bde782261dd55ae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cafc082232bc281bbf9e17de589078beb6a1441b33c3240deda2e600396253cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3b6c9cbf97be735f1ab002937cf8a13e3df935c929c6453b87b7a7f8f3fbd84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T22:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T22:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"info","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40942","PortSpecifier":{"PortValue":40942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40942","PortSpecifier":{"PortValue":40942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846294,"nanos":695995745},"http":{"id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","method":"POST","headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7370dcf3-9065-4aa9-934b-b01b4605c483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=93f99ec4-a591-4762-b063-9328846c3ab2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/899cace464f0"]}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/899cace464f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=93f99ec4-a591-4762-b063-9328846c3ab2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7370dcf3-9065-4aa9-934b-b01b4605c483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8cb98a9decbff6d5d9252c21016e0174803f84b8f5b023b9a9a0b14d2864b4d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1850d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c85c8ed5-d099-45cb-8f86-e7ce0dd8b49a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39080","PortSpecifier":{"PortValue":39080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-091ba5.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39080","PortSpecifier":{"PortValue":39080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846294,"nanos":737143336},"http":{"id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","method":"POST","headers":{":authority":"e2e-shared-b-091ba5.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7370dcf3-9065-4aa9-934b-b01b4605c483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=93f99ec4-a591-4762-b063-9328846c3ab2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/899cace464f0"]}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/899cace464f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=93f99ec4-a591-4762-b063-9328846c3ab2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7370dcf3-9065-4aa9-934b-b01b4605c483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e1b739e523b82e716b0e583f2f262c08e590ab72aa29a6bdfcdb4db36962c0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-091ba5.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-091ba5/rate-test-model-091ba5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-091ba5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1a39a1a-b851-4149-897a-3e0ec7ff21e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40952","PortSpecifier":{"PortValue":40952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","method":"POST","path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions","host":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40952","PortSpecifier":{"PortValue":40952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846294,"nanos":782582312},"http":{"id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","method":"POST","headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO\"}"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","subscription":"e2e-rate-iso-a-ae2145","tenant":"e2e-shared-a-a1850d","userId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\",\"requestedSubscription\":\"e2e-rate-iso-a-ae2145\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1850d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ae2145"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","selected_subscription":"e2e-rate-iso-a-ae2145","selected_subscription_key":"ai-tenant-e2e-shared-a-a1850d/e2e-rate-iso-a-ae2145@ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dad9fae-599f-4b97-9e3a-079672dd03f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42048","PortSpecifier":{"PortValue":42048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","method":"POST","path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions","host":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42048","PortSpecifier":{"PortValue":42048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846295,"nanos":844831141},"http":{"id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","method":"POST","headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO"}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO\"}"}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","subscription":"e2e-rate-iso-a-ae2145","tenant":"e2e-shared-a-a1850d","userId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\",\"requestedSubscription\":\"e2e-rate-iso-a-ae2145\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"}}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1850d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ae2145"}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","selected_subscription":"e2e-rate-iso-a-ae2145","selected_subscription_key":"ai-tenant-e2e-shared-a-a1850d/e2e-rate-iso-a-ae2145@ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"566d1bdc-84e9-4c4f-80b2-e8c4676a7adb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42054","PortSpecifier":{"PortValue":42054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","method":"POST","path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions","host":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42054","PortSpecifier":{"PortValue":42054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846296,"nanos":884137434},"http":{"id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","method":"POST","headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO"}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO\"}"}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","subscription":"e2e-rate-iso-a-ae2145","tenant":"e2e-shared-a-a1850d","userId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\",\"requestedSubscription\":\"e2e-rate-iso-a-ae2145\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"}}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1850d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ae2145"}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","selected_subscription":"e2e-rate-iso-a-ae2145","selected_subscription_key":"ai-tenant-e2e-shared-a-a1850d/e2e-rate-iso-a-ae2145@ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"473caa7c-ff1f-4641-9765-6eef2e3e8a6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42070","PortSpecifier":{"PortValue":42070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","method":"POST","path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions","host":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42070","PortSpecifier":{"PortValue":42070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846297,"nanos":920346807},"http":{"id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","method":"POST","headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO"}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO\"}"}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","subscription":"e2e-rate-iso-a-ae2145","tenant":"e2e-shared-a-a1850d","userId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\",\"requestedSubscription\":\"e2e-rate-iso-a-ae2145\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"}}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1850d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ae2145"}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","selected_subscription":"e2e-rate-iso-a-ae2145","selected_subscription_key":"ai-tenant-e2e-shared-a-a1850d/e2e-rate-iso-a-ae2145@ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf979486-2c0b-4dc3-abe3-3b51f0aa864f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42086","PortSpecifier":{"PortValue":42086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","method":"POST","path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions","host":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42086","PortSpecifier":{"PortValue":42086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846298,"nanos":956486294},"http":{"id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","method":"POST","headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO"}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO\"}"}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","subscription":"e2e-rate-iso-a-ae2145","tenant":"e2e-shared-a-a1850d","userId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\",\"requestedSubscription\":\"e2e-rate-iso-a-ae2145\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"}}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1850d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ae2145"}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","selected_subscription":"e2e-rate-iso-a-ae2145","selected_subscription_key":"ai-tenant-e2e-shared-a-a1850d/e2e-rate-iso-a-ae2145@ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3b2acdd-40fc-48fc-a91d-e0e86a914386","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"258365f7-4da6-4c77-befb-5ade03577d26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42096","PortSpecifier":{"PortValue":42096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"258365f7-4da6-4c77-befb-5ade03577d26","method":"POST","path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions","host":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"258365f7-4da6-4c77-befb-5ade03577d26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42096","PortSpecifier":{"PortValue":42096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846299,"nanos":995700516},"http":{"id":"258365f7-4da6-4c77-befb-5ade03577d26","method":"POST","headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO"}
{"level":"debug","ts":"2026-07-23T22:38:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Em2gAfFiklCStlC_q4t8iFrLQdlqN7VeFQiq5j1Q6Q3AQ2zGxNcJBajHpFO\"}"}
{"level":"debug","ts":"2026-07-23T22:38:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","subscription":"e2e-rate-iso-a-ae2145","tenant":"e2e-shared-a-a1850d","userId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\",\"requestedSubscription\":\"e2e-rate-iso-a-ae2145\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"}}
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"258365f7-4da6-4c77-befb-5ade03577d26","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1850d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ae2145"}
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"258365f7-4da6-4c77-befb-5ade03577d26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb83477a-b81b-4e43-b1bf-33db5d22a094","keyName":"e2e-rate-a-ae2145","selected_subscription":"e2e-rate-iso-a-ae2145","selected_subscription_key":"ai-tenant-e2e-shared-a-a1850d/e2e-rate-iso-a-ae2145@ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ae2145","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"258365f7-4da6-4c77-befb-5ade03577d26","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"258365f7-4da6-4c77-befb-5ade03577d26","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44958","PortSpecifier":{"PortValue":44958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44958","PortSpecifier":{"PortValue":44958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846308,"nanos":775799091},"http":{"id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","method":"POST","headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7370dcf3-9065-4aa9-934b-b01b4605c483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=93f99ec4-a591-4762-b063-9328846c3ab2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/899cace464f0"]}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/899cace464f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=93f99ec4-a591-4762-b063-9328846c3ab2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7370dcf3-9065-4aa9-934b-b01b4605c483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8cb98a9decbff6d5d9252c21016e0174803f84b8f5b023b9a9a0b14d2864b4d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1850d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29ba71af-6eb2-4010-a8bc-d89e15d93ddb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56320","PortSpecifier":{"PortValue":56320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2536655d-3306-4c2a-b16f-3c21a73a4119","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-091ba5.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56320","PortSpecifier":{"PortValue":56320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846308,"nanos":822352905},"http":{"id":"2536655d-3306-4c2a-b16f-3c21a73a4119","method":"POST","headers":{":authority":"e2e-shared-b-091ba5.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7370dcf3-9065-4aa9-934b-b01b4605c483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=93f99ec4-a591-4762-b063-9328846c3ab2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/899cace464f0"]}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/899cace464f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=93f99ec4-a591-4762-b063-9328846c3ab2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7370dcf3-9065-4aa9-934b-b01b4605c483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e1b739e523b82e716b0e583f2f262c08e590ab72aa29a6bdfcdb4db36962c0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-091ba5.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-091ba5/rate-test-model-091ba5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-091ba5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2536655d-3306-4c2a-b16f-3c21a73a4119","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44970","PortSpecifier":{"PortValue":44970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","method":"POST","path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions","host":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44970","PortSpecifier":{"PortValue":44970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846308,"nanos":856673159},"http":{"id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","method":"POST","headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HK4iOqz6imm5UkJC_tMcLVXcubQXlfxx1PrApmJrO7F6ScV7ZWKH3mHgPilI"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HK4iOqz6imm5UkJC_tMcLVXcubQXlfxx1PrApmJrO7F6ScV7ZWKH3mHgPilI\"}"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de0ef60a-1583-46ec-aec1-cb0df1ee34ff","keyName":"e2e-rate-a-7ce16a","subscription":"e2e-rate-iso-a-7ce16a","tenant":"e2e-shared-a-a1850d","userId":"de0ef60a-1583-46ec-aec1-cb0df1ee34ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\",\"requestedSubscription\":\"e2e-rate-iso-a-7ce16a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ce16a","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1850d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ce16a"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"de0ef60a-1583-46ec-aec1-cb0df1ee34ff","keyName":"e2e-rate-a-7ce16a","selected_subscription":"e2e-rate-iso-a-7ce16a","selected_subscription_key":"ai-tenant-e2e-shared-a-a1850d/e2e-rate-iso-a-7ce16a@ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ce16a","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aff2bfd3-9d2d-4a89-ae74-d0225909071b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44980","PortSpecifier":{"PortValue":44980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","method":"POST","path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions","host":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44980","PortSpecifier":{"PortValue":44980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846309,"nanos":892531431},"http":{"id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","method":"POST","headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HK4iOqz6imm5UkJC_tMcLVXcubQXlfxx1PrApmJrO7F6ScV7ZWKH3mHgPilI"}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HK4iOqz6imm5UkJC_tMcLVXcubQXlfxx1PrApmJrO7F6ScV7ZWKH3mHgPilI\"}"}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de0ef60a-1583-46ec-aec1-cb0df1ee34ff","keyName":"e2e-rate-a-7ce16a","subscription":"e2e-rate-iso-a-7ce16a","tenant":"e2e-shared-a-a1850d","userId":"de0ef60a-1583-46ec-aec1-cb0df1ee34ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\",\"requestedSubscription\":\"e2e-rate-iso-a-7ce16a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ce16a","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"}}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1850d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ce16a"}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"de0ef60a-1583-46ec-aec1-cb0df1ee34ff","keyName":"e2e-rate-a-7ce16a","selected_subscription":"e2e-rate-iso-a-7ce16a","selected_subscription_key":"ai-tenant-e2e-shared-a-a1850d/e2e-rate-iso-a-7ce16a@ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ce16a","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d9e89d0-7a29-478a-a964-2d5815518d8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44988","PortSpecifier":{"PortValue":44988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"231b142f-dfd9-498a-8c68-8d81ede99850","method":"POST","path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions","host":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44988","PortSpecifier":{"PortValue":44988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846310,"nanos":926708672},"http":{"id":"231b142f-dfd9-498a-8c68-8d81ede99850","method":"POST","headers":{":authority":"e2e-shared-a-a1850d.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HK4iOqz6imm5UkJC_tMcLVXcubQXlfxx1PrApmJrO7F6ScV7ZWKH3mHgPilI"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HK4iOqz6imm5UkJC_tMcLVXcubQXlfxx1PrApmJrO7F6ScV7ZWKH3mHgPilI\"}"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de0ef60a-1583-46ec-aec1-cb0df1ee34ff","keyName":"e2e-rate-a-7ce16a","subscription":"e2e-rate-iso-a-7ce16a","tenant":"e2e-shared-a-a1850d","userId":"de0ef60a-1583-46ec-aec1-cb0df1ee34ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\",\"requestedSubscription\":\"e2e-rate-iso-a-7ce16a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a1850d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ce16a","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a1850d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ce16a"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"de0ef60a-1583-46ec-aec1-cb0df1ee34ff","keyName":"e2e-rate-a-7ce16a","selected_subscription":"e2e-rate-iso-a-7ce16a","selected_subscription_key":"ai-tenant-e2e-shared-a-a1850d/e2e-rate-iso-a-7ce16a@ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a1850d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ce16a","namespace":"ai-tenant-e2e-shared-a-a1850d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a1850d/rate-test-model-a1850d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"231b142f-dfd9-498a-8c68-8d81ede99850","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56332","PortSpecifier":{"PortValue":56332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","method":"POST","path":"/ai-tenant-e2e-shared-b-091ba5/rate-test-model-091ba5/v1/completions","host":"e2e-shared-b-091ba5.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56332","PortSpecifier":{"PortValue":56332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784846310,"nanos":961989152},"http":{"id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","method":"POST","headers":{":authority":"e2e-shared-b-091ba5.apps.ce0cc835-da29-4db6-a058-899cace464f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-091ba5/rate-test-model-091ba5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aCpa9QlU45OULY4E_bTEtMLKlSnA0Uue6Nr3NrEwOmHXNj9j4hdzp8wAUtyI"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-091ba5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aCpa9QlU45OULY4E_bTEtMLKlSnA0Uue6Nr3NrEwOmHXNj9j4hdzp8wAUtyI\"}"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-091ba5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"787e0c68-78a8-4b4e-a9e4-5fb65371fdfc","keyName":"e2e-rate-b-7ce16a","subscription":"e2e-rate-iso-b-7ce16a","tenant":"e2e-shared-b-091ba5","userId":"787e0c68-78a8-4b4e-a9e4-5fb65371fdfc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-091ba5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-091ba5/rate-test-model-091ba5\",\"requestedSubscription\":\"e2e-rate-iso-b-7ce16a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-091ba5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-091ba5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7ce16a","namespace":"ai-tenant-e2e-shared-b-091ba5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-091ba5/rate-test-model-091ba5"}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-091ba5/rate-test-model-091ba5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-091ba5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-7ce16a"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"787e0c68-78a8-4b4e-a9e4-5fb65371fdfc","keyName":"e2e-rate-b-7ce16a","selected_subscription":"e2e-rate-iso-b-7ce16a","selected_subscription_key":"ai-tenant-e2e-shared-b-091ba5/e2e-rate-iso-b-7ce16a@ai-tenant-e2e-shared-b-091ba5/rate-test-model-091ba5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-091ba5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7ce16a","namespace":"ai-tenant-e2e-shared-b-091ba5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-091ba5/rate-test-model-091ba5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T22:38:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bbb4c48-3441-422b-98a8-8ac0f5553d64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T22:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99ffb4ad9061b71ebc77ba8e424687745738382df6fad22aeb7a5799e3378465"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cafc082232bc281bbf9e17de589078beb6a1441b33c3240deda2e600396253cf"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22987d497d49d185b8e1840dfaca0b7cc76d7f7d865e02d605f6944ab27f5387"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d8f535949bdbf834ffe094ff0d4c8be55a209c8923b64ca1a5bfd012abcf519"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b509fa331a8234c7d7ce0130ad2de401a0bdfe2d8c8b1814afff0bedbb275d7f"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/610dc09280ebf5d621d91a9d392e1d3d77f65832747a21e0378e71daf1696b19"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a7cef01ab776f4b63b0d2b994b31541615269380af8bf651a3d263bf3c24519"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc24d02be49d146285e350d3d3f5c8ea99e92ad59b836c2ed93178004ceae2ac"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b185e44b04adc71641b0b29dafdd012a1dc294f3f7de47b78fa3c784c6e5a21b"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0eca06ccec88db1fc30e37b6607b8b7d511e94255fabceac81450f3ea624354a"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93ad2438d0f6825e572db88b2b125c40c534503ddbf6f7f68a584936373c335a"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dba06d1aa9fc0bbf0f002750f9e6c89631b818eccc389b842eceda8e0d15213"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03b339d89208dcd334b10ee2d84e95c90822a0c75a06c0c4dcfac727c088d792"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e1b739e523b82e716b0e583f2f262c08e590ab72aa29a6bdfcdb4db36962c0d"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23d14ecaf5c9da778f36598cf8416f1231ac767158745a4ae57337b2d20ed3ef"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cb98a9decbff6d5d9252c21016e0174803f84b8f5b023b9a9a0b14d2864b4d3"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/764766888dce81f8414cfbfd143ce8b083eb57c0967127d7ae43d787de1e5355"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90c976d82aa2482a25263906b4381bb6ebb29def0adb61cf474e78cf4b76a6c3"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3b6c9cbf97be735f1ab002937cf8a13e3df935c929c6453b87b7a7f8f3fbd84"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d4053fee40edf47770484d84fa57105cc807b0f75941e135a20237328a6dde3"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca911997675ecab275dd7c218bc1bba7bea6923b84e140810152fe060a186fa6"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0976af25c846d6cdb91382c8dc0c7d471502e8095e1c9e1fe203f0106a2d5fb5"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6db068ae81272e8ddde20e03ec44bc8ba7ff5b007baa172eb7b6e8ddf495081"}
{"level":"info","ts":"2026-07-23T22:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2faf99c9074e60640ca1dc561656870002215f6dc729a319bde782261dd55ae9"}