{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}}
{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"}
{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b733c659-6da3-4e1a-bed6-e64126216bc4","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092404,"nanos":579714300},"http":{"id":"b733c659-6da3-4e1a-bed6-e64126216bc4","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu"}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu\"}"}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","subscription":"e2e-rate-iso-a-aa71d8","tenant":"e2e-shared-a-2b193e","userId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28b064b3-a375-419e-8818-e9c452c0557d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39286","PortSpecifier":{"PortValue":39286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28b064b3-a375-419e-8818-e9c452c0557d","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28b064b3-a375-419e-8818-e9c452c0557d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39286","PortSpecifier":{"PortValue":39286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092405,"nanos":617885247},"http":{"id":"28b064b3-a375-419e-8818-e9c452c0557d","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu"}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu\"}"}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","subscription":"e2e-rate-iso-a-aa71d8","tenant":"e2e-shared-a-2b193e","userId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28b064b3-a375-419e-8818-e9c452c0557d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28b064b3-a375-419e-8818-e9c452c0557d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28b064b3-a375-419e-8818-e9c452c0557d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39296","PortSpecifier":{"PortValue":39296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df25cd56-d381-4718-9b5d-830a72a43ad8","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39296","PortSpecifier":{"PortValue":39296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092406,"nanos":679684526},"http":{"id":"df25cd56-d381-4718-9b5d-830a72a43ad8","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu"}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu\"}"}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","subscription":"e2e-rate-iso-a-aa71d8","tenant":"e2e-shared-a-2b193e","userId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39302","PortSpecifier":{"PortValue":39302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39302","PortSpecifier":{"PortValue":39302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092407,"nanos":715719681},"http":{"id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu"}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu\"}"}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","subscription":"e2e-rate-iso-a-aa71d8","tenant":"e2e-shared-a-2b193e","userId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39314","PortSpecifier":{"PortValue":39314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39314","PortSpecifier":{"PortValue":39314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092408,"nanos":752673832},"http":{"id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu\"}"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","subscription":"e2e-rate-iso-a-aa71d8","tenant":"e2e-shared-a-2b193e","userId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39476","PortSpecifier":{"PortValue":39476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","method":"POST","path":"/ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a/v1/completions","host":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39476","PortSpecifier":{"PortValue":39476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092408,"nanos":788369202},"http":{"id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","method":"POST","headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lfnKDwIKQKZGFpVI_E6ihaLM4HotwVlx4FRCQAGgSafBruMFeH0UAqv61ReS"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lfnKDwIKQKZGFpVI_E6ihaLM4HotwVlx4FRCQAGgSafBruMFeH0UAqv61ReS\"}"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d18de4ce-3ed2-4f72-b33f-b49e31128f05","keyName":"e2e-rate-b-aa71d8","subscription":"e2e-rate-iso-b-aa71d8","tenant":"e2e-shared-b-c75d5a","userId":"d18de4ce-3ed2-4f72-b33f-b49e31128f05","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a\",\"requestedSubscription\":\"e2e-rate-iso-b-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m","name":"rate-test-model-c75d5a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-aa71d8","namespace":"ai-tenant-e2e-shared-b-c75d5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a"}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-aa71d8"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d18de4ce-3ed2-4f72-b33f-b49e31128f05","keyName":"e2e-rate-b-aa71d8","selected_subscription":"e2e-rate-iso-b-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-b-c75d5a/e2e-rate-iso-b-aa71d8@ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m","name":"rate-test-model-c75d5a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-aa71d8","namespace":"ai-tenant-e2e-shared-b-c75d5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607"}
{"level":"info","ts":"2026-07-26T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae063b5ac4a412e38b0895b242ac88b0dada603c6dc7a1c820b75c45af5a4e59"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c0e734c5af8cd826a97740cc45838d64c28b92f82daf4d830be13ca052bd474"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2fba1574cd190a2107302dba5b6a4abba8f7dbc9478897b18c2dd0b3bb2793f"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34cb6d89459c061949b0f53fc8a312a308feb9e0c372a4e657d0259d0437cdac"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16a12cffbad35950603b75c5e17d80d54bde6593909e31d5c17b02216dca3c27"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ee9202944064914eae4620c4693858f7df2712f0486351eafb659cd92b69e91"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da0b5135fa384cef707a0e38ad20a7eaa5e8daaf8aaa2729b7e932e2ea637ea8"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19"}
{"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"}
{"level":"info","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52408","PortSpecifier":{"PortValue":52408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52408","PortSpecifier":{"PortValue":52408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092481,"nanos":951828961},"http":{"id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","method":"POST","headers":{":authority":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}}
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52420","PortSpecifier":{"PortValue":52420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52420","PortSpecifier":{"PortValue":52420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092481,"nanos":993414686},"http":{"id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","method":"POST","headers":{":authority":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EzV01Eh7pZRCa9v8_F5m1Az6UVYL1aoBYV4muGeMogjbu2PkCAnfnFkslqQ5"}
{"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EzV01Eh7pZRCa9v8_F5m1Az6UVYL1aoBYV4muGeMogjbu2PkCAnfnFkslqQ5\"}"}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"587dec44-316e-47c7-bdee-2cc264bf1f82","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"587dec44-316e-47c7-bdee-2cc264bf1f82","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"587dec44-316e-47c7-bdee-2cc264bf1f82","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1"}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"}
{"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}
{"level":"info","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33324","PortSpecifier":{"PortValue":33324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-4735db.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33324","PortSpecifier":{"PortValue":33324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092526,"nanos":767587199},"http":{"id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","method":"POST","headers":{":authority":"e2e-ipp-a-4735db.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}}
{"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-4735db.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-4735db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33326","PortSpecifier":{"PortValue":33326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","method":"POST","path":"/ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db/v1/chat/completions","host":"e2e-ipp-a-4735db.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33326","PortSpecifier":{"PortValue":33326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092528,"nanos":836433039},"http":{"id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","method":"POST","headers":{":authority":"e2e-ipp-a-4735db.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JdJyVmjIyfraE57k_mv3pg5CB3gqyYoJlTikqMwniojDiFq9tmaitWmmac2u"}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-4735db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JdJyVmjIyfraE57k_mv3pg5CB3gqyYoJlTikqMwniojDiFq9tmaitWmmac2u\"}"}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-4735db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"22ed78f5-011b-4291-8bce-715abfc9715a","keyName":"e2e-ipp-4735db","subscription":"ipp-route-4735db-sub","tenant":"e2e-ipp-a-4735db","userId":"22ed78f5-011b-4291-8bce-715abfc9715a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-4735db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db\",\"requestedSubscription\":\"ipp-route-4735db-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-4735db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-4735db/models/facebook/opt-125m","name":"ipp-route-4735db","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-4735db-sub","namespace":"ai-tenant-e2e-ipp-a-4735db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db"}}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-4735db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-4735db-sub"}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"22ed78f5-011b-4291-8bce-715abfc9715a","keyName":"e2e-ipp-4735db","selected_subscription":"ipp-route-4735db-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db-sub@ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-4735db/models/facebook/opt-125m","name":"ipp-route-4735db","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-4735db-sub","namespace":"ai-tenant-e2e-ipp-a-4735db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"}
{"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b"}
{"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d"}
{"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"}
{"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268"}
{"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260"}
{"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"}
{"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366"}
{"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1"}
{"level":"info","ts":"2026-07-26T19:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"}
{"level":"info","ts":"2026-07-26T19:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b"}
{"level":"info","ts":"2026-07-26T19:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}