{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"}
{"level":"error","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34308","PortSpecifier":{"PortValue":34308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26c5f940-689d-4397-89ea-0f1c67a326c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34308","PortSpecifier":{"PortValue":34308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576686,"nanos":248537631},"http":{"id":"26c5f940-689d-4397-89ea-0f1c67a326c8","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48012","PortSpecifier":{"PortValue":48012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48012","PortSpecifier":{"PortValue":48012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576686,"nanos":295515565},"http":{"id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34322","PortSpecifier":{"PortValue":34322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34322","PortSpecifier":{"PortValue":34322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576686,"nanos":341367378},"http":{"id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576687,"nanos":406414019},"http":{"id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edec8379-e543-4042-893c-649916dde97c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34342","PortSpecifier":{"PortValue":34342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edec8379-e543-4042-893c-649916dde97c","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edec8379-e543-4042-893c-649916dde97c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34342","PortSpecifier":{"PortValue":34342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576688,"nanos":446330575},"http":{"id":"edec8379-e543-4042-893c-649916dde97c","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"edec8379-e543-4042-893c-649916dde97c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"edec8379-e543-4042-893c-649916dde97c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edec8379-e543-4042-893c-649916dde97c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edec8379-e543-4042-893c-649916dde97c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edec8379-e543-4042-893c-649916dde97c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34356","PortSpecifier":{"PortValue":34356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02e78427-78e5-4ee3-9291-a26990dbf67c","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34356","PortSpecifier":{"PortValue":34356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576689,"nanos":485787054},"http":{"id":"02e78427-78e5-4ee3-9291-a26990dbf67c","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34362","PortSpecifier":{"PortValue":34362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3899bf6c-2224-4147-982d-5fab2fab89f2","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34362","PortSpecifier":{"PortValue":34362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576690,"nanos":523234368},"http":{"id":"3899bf6c-2224-4147-982d-5fab2fab89f2","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34374","PortSpecifier":{"PortValue":34374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34374","PortSpecifier":{"PortValue":34374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576691,"nanos":586964904},"http":{"id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34390","PortSpecifier":{"PortValue":34390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34390","PortSpecifier":{"PortValue":34390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576692,"nanos":628783520},"http":{"id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34392","PortSpecifier":{"PortValue":34392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76e164b2-90cc-4317-b2e4-020b09e288d4","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34392","PortSpecifier":{"PortValue":34392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576693,"nanos":666917361},"http":{"id":"76e164b2-90cc-4317-b2e4-020b09e288d4","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60478","PortSpecifier":{"PortValue":60478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60478","PortSpecifier":{"PortValue":60478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576702,"nanos":605918105},"http":{"id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59894","PortSpecifier":{"PortValue":59894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59894","PortSpecifier":{"PortValue":59894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576702,"nanos":648303795},"http":{"id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66715172-3677-4c30-b9a8-708295e030d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60490","PortSpecifier":{"PortValue":60490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66715172-3677-4c30-b9a8-708295e030d7","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66715172-3677-4c30-b9a8-708295e030d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60490","PortSpecifier":{"PortValue":60490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576702,"nanos":700043448},"http":{"id":"66715172-3677-4c30-b9a8-708295e030d7","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO\"}"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","subscription":"e2e-rate-iso-a-9742f7","tenant":"e2e-shared-a-037874","userId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-9742f7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66715172-3677-4c30-b9a8-708295e030d7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9742f7"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","selected_subscription":"e2e-rate-iso-a-9742f7","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-9742f7@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66715172-3677-4c30-b9a8-708295e030d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66715172-3677-4c30-b9a8-708295e030d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60504","PortSpecifier":{"PortValue":60504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60504","PortSpecifier":{"PortValue":60504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576703,"nanos":739918944},"http":{"id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO"}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO\"}"}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","subscription":"e2e-rate-iso-a-9742f7","tenant":"e2e-shared-a-037874","userId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-9742f7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9742f7"}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","selected_subscription":"e2e-rate-iso-a-9742f7","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-9742f7@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59176","PortSpecifier":{"PortValue":59176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"644e0181-1212-462c-91b1-5ca029f8ef17","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59176","PortSpecifier":{"PortValue":59176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576704,"nanos":778549272},"http":{"id":"644e0181-1212-462c-91b1-5ca029f8ef17","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO\"}"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","subscription":"e2e-rate-iso-a-9742f7","tenant":"e2e-shared-a-037874","userId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-9742f7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9742f7"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","selected_subscription":"e2e-rate-iso-a-9742f7","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-9742f7@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45926","PortSpecifier":{"PortValue":45926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","method":"POST","path":"/ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917/v1/completions","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45926","PortSpecifier":{"PortValue":45926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576704,"nanos":821421842},"http":{"id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7tarfl1z2V3a1OGW_G0sNZFu77olYTMXyIglwXDQEwBCOcg7IqtxGRULTUR2"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7tarfl1z2V3a1OGW_G0sNZFu77olYTMXyIglwXDQEwBCOcg7IqtxGRULTUR2\"}"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a3b3f54-bc69-46b1-8864-3def52ba3588","keyName":"e2e-rate-b-9742f7","subscription":"e2e-rate-iso-b-9742f7","tenant":"e2e-shared-b-e35917","userId":"3a3b3f54-bc69-46b1-8864-3def52ba3588","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917\",\"requestedSubscription\":\"e2e-rate-iso-b-9742f7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e35917","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9742f7","namespace":"ai-tenant-e2e-shared-b-e35917","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917"}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9742f7"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3a3b3f54-bc69-46b1-8864-3def52ba3588","keyName":"e2e-rate-b-9742f7","selected_subscription":"e2e-rate-iso-b-9742f7","selected_subscription_key":"ai-tenant-e2e-shared-b-e35917/e2e-rate-iso-b-9742f7@ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e35917","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9742f7","namespace":"ai-tenant-e2e-shared-b-e35917","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25"}
{"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279"}
{"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"}
{"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"}
{"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"}
{"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"}
{"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"}
{"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e"}
{"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"}