{"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"}
{"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41318","PortSpecifier":{"PortValue":41318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41318","PortSpecifier":{"PortValue":41318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911921,"nanos":892275189},"http":{"id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40effec4-e62d-432a-8642-de8a5362c979","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41320","PortSpecifier":{"PortValue":41320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40effec4-e62d-432a-8642-de8a5362c979","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40effec4-e62d-432a-8642-de8a5362c979","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41320","PortSpecifier":{"PortValue":41320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911922,"nanos":941013611},"http":{"id":"40effec4-e62d-432a-8642-de8a5362c979","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40effec4-e62d-432a-8642-de8a5362c979","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40effec4-e62d-432a-8642-de8a5362c979","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40effec4-e62d-432a-8642-de8a5362c979","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41332","PortSpecifier":{"PortValue":41332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41332","PortSpecifier":{"PortValue":41332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911923,"nanos":978629848},"http":{"id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43480","PortSpecifier":{"PortValue":43480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43480","PortSpecifier":{"PortValue":43480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911925,"nanos":18310244},"http":{"id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43490","PortSpecifier":{"PortValue":43490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43490","PortSpecifier":{"PortValue":43490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911926,"nanos":58596410},"http":{"id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43494","PortSpecifier":{"PortValue":43494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43494","PortSpecifier":{"PortValue":43494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911927,"nanos":100140360},"http":{"id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43506","PortSpecifier":{"PortValue":43506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43506","PortSpecifier":{"PortValue":43506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911928,"nanos":138290590},"http":{"id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43508","PortSpecifier":{"PortValue":43508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"067caeda-8604-413d-a4b7-72f7a59bce40","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43508","PortSpecifier":{"PortValue":43508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911929,"nanos":181011606},"http":{"id":"067caeda-8604-413d-a4b7-72f7a59bce40","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43522","PortSpecifier":{"PortValue":43522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43522","PortSpecifier":{"PortValue":43522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911930,"nanos":219844041},"http":{"id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39906","PortSpecifier":{"PortValue":39906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","method":"POST","path":"/ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6/v1/completions","host":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39906","PortSpecifier":{"PortValue":39906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911930,"nanos":259093368},"http":{"id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","method":"POST","headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y1eM08ZFhKXCAN9K_gXhRN6HpFd5mesxwGgtisVZMhFkJxQLddTS0kbCzEW9"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y1eM08ZFhKXCAN9K_gXhRN6HpFd5mesxwGgtisVZMhFkJxQLddTS0kbCzEW9\"}"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265ed9fe-1de9-4951-95cf-006cacce8189","keyName":"e2e-rate-b-e21d86","subscription":"e2e-rate-iso-b-e21d86","tenant":"e2e-shared-b-a29da6","userId":"265ed9fe-1de9-4951-95cf-006cacce8189","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6\",\"requestedSubscription\":\"e2e-rate-iso-b-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a29da6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e21d86","namespace":"ai-tenant-e2e-shared-b-a29da6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6"}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a29da6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e21d86"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265ed9fe-1de9-4951-95cf-006cacce8189","keyName":"e2e-rate-b-e21d86","selected_subscription":"e2e-rate-iso-b-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-b-a29da6/e2e-rate-iso-b-e21d86@ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a29da6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e21d86","namespace":"ai-tenant-e2e-shared-b-a29da6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4785d683adbb6a5894cec9fdb6aa9d0a68a75dd673a67c3808cfb5c35981b344"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea5fe92f151339ad9fa27a1cbd8fdbd7a76cee4756eafd8c59f7f3aac13c4959"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4c31d1597639eb1acd51e3ce2aedca35f7e39c8508d4a306c3e66bab139bc8d"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cfbfafe103518959b7d7e8c3a363c82da2df40b88d3e6a096ee5cde2b61bc9d"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4515c5a3500677874d1a7b75c380a71033666da3cb739d9520a9e1be6e37187b"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c707b56b013cf433d5f99fcd6c0693dd9e5fed41396c5ce7511dc721f4df0895"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36"}
{"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"}
{"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"}
{"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"}
{"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"}
{"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52"}
{"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513"}
{"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1df62ca7954ce3199a8fb1cf952d160ed1cdaf653bd3c5053b9be632c2ebbeb2"}
{"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b"}
{"level":"info","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4020085b-959a-429f-9c50-51e1bb94340d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35552","PortSpecifier":{"PortValue":35552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4020085b-959a-429f-9c50-51e1bb94340d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4020085b-959a-429f-9c50-51e1bb94340d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35552","PortSpecifier":{"PortValue":35552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784912003,"nanos":844858591},"http":{"id":"4020085b-959a-429f-9c50-51e1bb94340d","method":"POST","headers":{":authority":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4020085b-959a-429f-9c50-51e1bb94340d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4020085b-959a-429f-9c50-51e1bb94340d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4020085b-959a-429f-9c50-51e1bb94340d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4020085b-959a-429f-9c50-51e1bb94340d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35554","PortSpecifier":{"PortValue":35554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35554","PortSpecifier":{"PortValue":35554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784912003,"nanos":895934939},"http":{"id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","method":"POST","headers":{":authority":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12ZEkFzN3BewwavqP_pHgvDZeIFgWj1EK5kRYYGXUuUKqhzOX1yu9eI2BVe6m"}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12ZEkFzN3BewwavqP_pHgvDZeIFgWj1EK5kRYYGXUuUKqhzOX1yu9eI2BVe6m\"}"}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"31f1df6c-1aa2-4ea7-afc3-68a414b491ad","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"31f1df6c-1aa2-4ea7-afc3-68a414b491ad","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"31f1df6c-1aa2-4ea7-afc3-68a414b491ad","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418"}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"}
{"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3"}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"}
{"level":"info","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59280","PortSpecifier":{"PortValue":59280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-b04709.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59280","PortSpecifier":{"PortValue":59280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784912038,"nanos":389421033},"http":{"id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","method":"POST","headers":{":authority":"e2e-ipp-a-b04709.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}}
{"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.84:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-b04709.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-b04709/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59290","PortSpecifier":{"PortValue":59290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","method":"POST","path":"/ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709/v1/chat/completions","host":"e2e-ipp-a-b04709.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59290","PortSpecifier":{"PortValue":59290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784912040,"nanos":451576985},"http":{"id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","method":"POST","headers":{":authority":"e2e-ipp-a-b04709.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gPS4jBubj12WGF7R_DDMc62vqTDmWFGlA3ums91a2KKXnKaE6dwvtXvM3IcV"}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-b04709.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gPS4jBubj12WGF7R_DDMc62vqTDmWFGlA3ums91a2KKXnKaE6dwvtXvM3IcV\"}"}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-b04709.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5406e41f-71a1-4f6a-ac3e-acae15e89919","keyName":"e2e-ipp-b04709","subscription":"ipp-route-b04709-sub","tenant":"e2e-ipp-a-b04709","userId":"5406e41f-71a1-4f6a-ac3e-acae15e89919","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-b04709.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709\",\"requestedSubscription\":\"ipp-route-b04709-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-b04709.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-b04709","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-b04709-sub","namespace":"ai-tenant-e2e-ipp-a-b04709","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709"}}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-b04709/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-b04709-sub"}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5406e41f-71a1-4f6a-ac3e-acae15e89919","keyName":"e2e-ipp-b04709","selected_subscription":"ipp-route-b04709-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709-sub@ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-b04709","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-b04709-sub","namespace":"ai-tenant-e2e-ipp-a-b04709","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"}
{"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418"}
{"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc"}
{"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"}
{"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"}
{"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"}
{"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48"}
{"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"}
{"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3"}
{"level":"info","ts":"2026-07-24T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9"}
{"level":"info","ts":"2026-07-24T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"}
{"level":"info","ts":"2026-07-24T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"}