{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"error","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4451ca8b-8a47-4bde-86b1-150b7e525762","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567805,"nanos":29598299},"http":{"id":"4451ca8b-8a47-4bde-86b1-150b7e525762","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34628","PortSpecifier":{"PortValue":34628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34628","PortSpecifier":{"PortValue":34628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567805,"nanos":79221975},"http":{"id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54952","PortSpecifier":{"PortValue":54952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54952","PortSpecifier":{"PortValue":54952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567805,"nanos":122039045},"http":{"id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54968","PortSpecifier":{"PortValue":54968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"964ad230-60fe-4cc2-a392-776feb76ba73","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54968","PortSpecifier":{"PortValue":54968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567806,"nanos":182369356},"http":{"id":"964ad230-60fe-4cc2-a392-776feb76ba73","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54974","PortSpecifier":{"PortValue":54974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bed95187-4088-40a4-860d-eae3b46cd20a","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54974","PortSpecifier":{"PortValue":54974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567807,"nanos":226139475},"http":{"id":"bed95187-4088-40a4-860d-eae3b46cd20a","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54984","PortSpecifier":{"PortValue":54984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54984","PortSpecifier":{"PortValue":54984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567808,"nanos":264582186},"http":{"id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54992","PortSpecifier":{"PortValue":54992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54992","PortSpecifier":{"PortValue":54992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567809,"nanos":302770910},"http":{"id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55002","PortSpecifier":{"PortValue":55002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b40a78b3-8186-4503-a4e1-770c58cacba6","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55002","PortSpecifier":{"PortValue":55002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567810,"nanos":344235208},"http":{"id":"b40a78b3-8186-4503-a4e1-770c58cacba6","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55004","PortSpecifier":{"PortValue":55004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55004","PortSpecifier":{"PortValue":55004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567811,"nanos":383172823},"http":{"id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8eca533-7b24-4724-b82b-54025087ba36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55016","PortSpecifier":{"PortValue":55016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8eca533-7b24-4724-b82b-54025087ba36","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8eca533-7b24-4724-b82b-54025087ba36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55016","PortSpecifier":{"PortValue":55016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567812,"nanos":422785436},"http":{"id":"f8eca533-7b24-4724-b82b-54025087ba36","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8eca533-7b24-4724-b82b-54025087ba36","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8eca533-7b24-4724-b82b-54025087ba36","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8eca533-7b24-4724-b82b-54025087ba36","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36724","PortSpecifier":{"PortValue":36724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36724","PortSpecifier":{"PortValue":36724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567813,"nanos":461690087},"http":{"id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36728","PortSpecifier":{"PortValue":36728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37269bb0-927e-493a-bd3f-82ce38456dc5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36728","PortSpecifier":{"PortValue":36728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567822,"nanos":327746336},"http":{"id":"37269bb0-927e-493a-bd3f-82ce38456dc5","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43156","PortSpecifier":{"PortValue":43156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43156","PortSpecifier":{"PortValue":43156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567822,"nanos":367050883},"http":{"id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36732","PortSpecifier":{"PortValue":36732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36732","PortSpecifier":{"PortValue":36732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567822,"nanos":407062092},"http":{"id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY\"}"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","subscription":"e2e-rate-iso-a-1438c5","tenant":"e2e-shared-a-a16895","userId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-1438c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1438c5"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","selected_subscription":"e2e-rate-iso-a-1438c5","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-1438c5@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51768","PortSpecifier":{"PortValue":51768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51768","PortSpecifier":{"PortValue":51768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567823,"nanos":447029770},"http":{"id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY\"}"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","subscription":"e2e-rate-iso-a-1438c5","tenant":"e2e-shared-a-a16895","userId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-1438c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1438c5"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","selected_subscription":"e2e-rate-iso-a-1438c5","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-1438c5@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51774","PortSpecifier":{"PortValue":51774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce431eac-6f08-427a-8741-3d5a297c6705","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51774","PortSpecifier":{"PortValue":51774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567824,"nanos":488173246},"http":{"id":"ce431eac-6f08-427a-8741-3d5a297c6705","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY\"}"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","subscription":"e2e-rate-iso-a-1438c5","tenant":"e2e-shared-a-a16895","userId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-1438c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1438c5"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","selected_subscription":"e2e-rate-iso-a-1438c5","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-1438c5@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51420","PortSpecifier":{"PortValue":51420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","method":"POST","path":"/ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5/v1/completions","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51420","PortSpecifier":{"PortValue":51420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567824,"nanos":524792655},"http":{"id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dG1bvagssc8PEnKk_qDUHYJq0jfME57VvuYOw8sNVyDt55Un1KWfLS5ZXmbi"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dG1bvagssc8PEnKk_qDUHYJq0jfME57VvuYOw8sNVyDt55Un1KWfLS5ZXmbi\"}"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9b2cad8b-ed51-4578-af50-80571ba29357","keyName":"e2e-rate-b-1438c5","subscription":"e2e-rate-iso-b-1438c5","tenant":"e2e-shared-b-e142d5","userId":"9b2cad8b-ed51-4578-af50-80571ba29357","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5\",\"requestedSubscription\":\"e2e-rate-iso-b-1438c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e142d5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1438c5","namespace":"ai-tenant-e2e-shared-b-e142d5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5"}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1438c5"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9b2cad8b-ed51-4578-af50-80571ba29357","keyName":"e2e-rate-b-1438c5","selected_subscription":"e2e-rate-iso-b-1438c5","selected_subscription_key":"ai-tenant-e2e-shared-b-e142d5/e2e-rate-iso-b-1438c5@ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e142d5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1438c5","namespace":"ai-tenant-e2e-shared-b-e142d5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"}
{"level":"info","ts":"2026-07-20T17:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"}
{"level":"info","ts":"2026-07-20T17:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"}
{"level":"info","ts":"2026-07-20T17:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1"}
{"level":"info","ts":"2026-07-20T17:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}