{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7831be1bb6aee9eee83cf5ae22c681f180b5fe2277ad511884a55181fa55cb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7831be1bb6aee9eee83cf5ae22c681f180b5fe2277ad511884a55181fa55cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23e2f7f1494ad25ce11e265399791ffd6ef8a9427119f394aeb48d4429855386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23e2f7f1494ad25ce11e265399791ffd6ef8a9427119f394aeb48d4429855386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7831be1bb6aee9eee83cf5ae22c681f180b5fe2277ad511884a55181fa55cb1"}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23e2f7f1494ad25ce11e265399791ffd6ef8a9427119f394aeb48d4429855386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e"}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7831be1bb6aee9eee83cf5ae22c681f180b5fe2277ad511884a55181fa55cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7831be1bb6aee9eee83cf5ae22c681f180b5fe2277ad511884a55181fa55cb1"}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23e2f7f1494ad25ce11e265399791ffd6ef8a9427119f394aeb48d4429855386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356"}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7831be1bb6aee9eee83cf5ae22c681f180b5fe2277ad511884a55181fa55cb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7831be1bb6aee9eee83cf5ae22c681f180b5fe2277ad511884a55181fa55cb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23e2f7f1494ad25ce11e265399791ffd6ef8a9427119f394aeb48d4429855386"}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7831be1bb6aee9eee83cf5ae22c681f180b5fe2277ad511884a55181fa55cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e"}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7831be1bb6aee9eee83cf5ae22c681f180b5fe2277ad511884a55181fa55cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356"}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7831be1bb6aee9eee83cf5ae22c681f180b5fe2277ad511884a55181fa55cb1"}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e"}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356"}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03"}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03"}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03"}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792"}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792"}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb3e312f3c103d677d056b335c2b13c497fd9b947e159b12e6015391eaaaf694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb3e312f3c103d677d056b335c2b13c497fd9b947e159b12e6015391eaaaf694"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb3e312f3c103d677d056b335c2b13c497fd9b947e159b12e6015391eaaaf694","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb3e312f3c103d677d056b335c2b13c497fd9b947e159b12e6015391eaaaf694"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb3e312f3c103d677d056b335c2b13c497fd9b947e159b12e6015391eaaaf694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb3e312f3c103d677d056b335c2b13c497fd9b947e159b12e6015391eaaaf694"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb3e312f3c103d677d056b335c2b13c497fd9b947e159b12e6015391eaaaf694","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb3e312f3c103d677d056b335c2b13c497fd9b947e159b12e6015391eaaaf694","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb3e312f3c103d677d056b335c2b13c497fd9b947e159b12e6015391eaaaf694"}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d"}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d"}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74"}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7112a86bd117dc036e7d6ee1d2e394fcd850360c60f9cc7187d9e6767fcd9ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7112a86bd117dc036e7d6ee1d2e394fcd850360c60f9cc7187d9e6767fcd9ed7"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7112a86bd117dc036e7d6ee1d2e394fcd850360c60f9cc7187d9e6767fcd9ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7112a86bd117dc036e7d6ee1d2e394fcd850360c60f9cc7187d9e6767fcd9ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7112a86bd117dc036e7d6ee1d2e394fcd850360c60f9cc7187d9e6767fcd9ed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7112a86bd117dc036e7d6ee1d2e394fcd850360c60f9cc7187d9e6767fcd9ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7112a86bd117dc036e7d6ee1d2e394fcd850360c60f9cc7187d9e6767fcd9ed7"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe55a4853d2baa8117ee27cab576e9b36097cbc3c3cf51e98137d8687d6d5060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe55a4853d2baa8117ee27cab576e9b36097cbc3c3cf51e98137d8687d6d5060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcbb708e6463f92475ca7323eab49e92781f543c853e60059fa7a4471bc1be91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe55a4853d2baa8117ee27cab576e9b36097cbc3c3cf51e98137d8687d6d5060"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcbb708e6463f92475ca7323eab49e92781f543c853e60059fa7a4471bc1be91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7112a86bd117dc036e7d6ee1d2e394fcd850360c60f9cc7187d9e6767fcd9ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"808b84c0e524b21abbbaab4820b3f6c66d105abcacc04a3bae891e1d527c8f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"808b84c0e524b21abbbaab4820b3f6c66d105abcacc04a3bae891e1d527c8f93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39705c58c1e8d9964bc0adb6c24a6e3702790992091674095254d292d4fc504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcbb708e6463f92475ca7323eab49e92781f543c853e60059fa7a4471bc1be91"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39705c58c1e8d9964bc0adb6c24a6e3702790992091674095254d292d4fc504c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe55a4853d2baa8117ee27cab576e9b36097cbc3c3cf51e98137d8687d6d5060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe55a4853d2baa8117ee27cab576e9b36097cbc3c3cf51e98137d8687d6d5060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe55a4853d2baa8117ee27cab576e9b36097cbc3c3cf51e98137d8687d6d5060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcbb708e6463f92475ca7323eab49e92781f543c853e60059fa7a4471bc1be91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcbb708e6463f92475ca7323eab49e92781f543c853e60059fa7a4471bc1be91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/808b84c0e524b21abbbaab4820b3f6c66d105abcacc04a3bae891e1d527c8f93"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcbb708e6463f92475ca7323eab49e92781f543c853e60059fa7a4471bc1be91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"808b84c0e524b21abbbaab4820b3f6c66d105abcacc04a3bae891e1d527c8f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["808b84c0e524b21abbbaab4820b3f6c66d105abcacc04a3bae891e1d527c8f93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7112a86bd117dc036e7d6ee1d2e394fcd850360c60f9cc7187d9e6767fcd9ed7"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"808b84c0e524b21abbbaab4820b3f6c66d105abcacc04a3bae891e1d527c8f93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39705c58c1e8d9964bc0adb6c24a6e3702790992091674095254d292d4fc504c"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe55a4853d2baa8117ee27cab576e9b36097cbc3c3cf51e98137d8687d6d5060"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39705c58c1e8d9964bc0adb6c24a6e3702790992091674095254d292d4fc504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39705c58c1e8d9964bc0adb6c24a6e3702790992091674095254d292d4fc504c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7211b7908cc095044dffa1750730a266701e4483076faf357bafe35a62a59b"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39705c58c1e8d9964bc0adb6c24a6e3702790992091674095254d292d4fc504c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d7211b7908cc095044dffa1750730a266701e4483076faf357bafe35a62a59b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d7211b7908cc095044dffa1750730a266701e4483076faf357bafe35a62a59b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd58f9371af27905548b884abbcfb1cceb207bdecbd02c6ef0ac5416eec2365"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcbb708e6463f92475ca7323eab49e92781f543c853e60059fa7a4471bc1be91"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d7211b7908cc095044dffa1750730a266701e4483076faf357bafe35a62a59b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe55a4853d2baa8117ee27cab576e9b36097cbc3c3cf51e98137d8687d6d5060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd58f9371af27905548b884abbcfb1cceb207bdecbd02c6ef0ac5416eec2365","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bd58f9371af27905548b884abbcfb1cceb207bdecbd02c6ef0ac5416eec2365"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de37d35baebdf8e8627dc34a6aadc456984d6dabb60ecbca06ff87ca8592e58"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/808b84c0e524b21abbbaab4820b3f6c66d105abcacc04a3bae891e1d527c8f93"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/038de57031fa9277e8df8d335398c54652a3c6219d9e65fdddc42f1086f31d2e"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd58f9371af27905548b884abbcfb1cceb207bdecbd02c6ef0ac5416eec2365","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcbb708e6463f92475ca7323eab49e92781f543c853e60059fa7a4471bc1be91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de37d35baebdf8e8627dc34a6aadc456984d6dabb60ecbca06ff87ca8592e58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2de37d35baebdf8e8627dc34a6aadc456984d6dabb60ecbca06ff87ca8592e58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b8de3ad77deb183c404c0491234447f9ff7c6d340525e6b1b46ce040a0399c"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39705c58c1e8d9964bc0adb6c24a6e3702790992091674095254d292d4fc504c"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d7211b7908cc095044dffa1750730a266701e4483076faf357bafe35a62a59b"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de37d35baebdf8e8627dc34a6aadc456984d6dabb60ecbca06ff87ca8592e58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"808b84c0e524b21abbbaab4820b3f6c66d105abcacc04a3bae891e1d527c8f93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"038de57031fa9277e8df8d335398c54652a3c6219d9e65fdddc42f1086f31d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["038de57031fa9277e8df8d335398c54652a3c6219d9e65fdddc42f1086f31d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd58f9371af27905548b884abbcfb1cceb207bdecbd02c6ef0ac5416eec2365"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de37d35baebdf8e8627dc34a6aadc456984d6dabb60ecbca06ff87ca8592e58"}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"038de57031fa9277e8df8d335398c54652a3c6219d9e65fdddc42f1086f31d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b8de3ad77deb183c404c0491234447f9ff7c6d340525e6b1b46ce040a0399c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b8de3ad77deb183c404c0491234447f9ff7c6d340525e6b1b46ce040a0399c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/038de57031fa9277e8df8d335398c54652a3c6219d9e65fdddc42f1086f31d2e"}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b8de3ad77deb183c404c0491234447f9ff7c6d340525e6b1b46ce040a0399c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b8de3ad77deb183c404c0491234447f9ff7c6d340525e6b1b46ce040a0399c"}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39705c58c1e8d9964bc0adb6c24a6e3702790992091674095254d292d4fc504c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d7211b7908cc095044dffa1750730a266701e4483076faf357bafe35a62a59b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd58f9371af27905548b884abbcfb1cceb207bdecbd02c6ef0ac5416eec2365","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2de37d35baebdf8e8627dc34a6aadc456984d6dabb60ecbca06ff87ca8592e58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"038de57031fa9277e8df8d335398c54652a3c6219d9e65fdddc42f1086f31d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b8de3ad77deb183c404c0491234447f9ff7c6d340525e6b1b46ce040a0399c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T21:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T21:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"}
{"level":"info","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33328","PortSpecifier":{"PortValue":33328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33328","PortSpecifier":{"PortValue":33328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757245,"nanos":579595397},"http":{"id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"065fdf82-13d4-4605-8eda-313cd1740e14","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4ead58d-9502-4f1c-a923-23128e88b40e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/96e6d5925b45"]}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/96e6d5925b45"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4ead58d-9502-4f1c-a923-23128e88b40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"065fdf82-13d4-4605-8eda-313cd1740e14","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fcbb708e6463f92475ca7323eab49e92781f543c853e60059fa7a4471bc1be91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c13186ce-3ee2-468c-9820-fcd26c414d4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38834","PortSpecifier":{"PortValue":38834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e44515.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38834","PortSpecifier":{"PortValue":38834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757245,"nanos":630830074},"http":{"id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","method":"POST","headers":{":authority":"e2e-shared-b-e44515.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"065fdf82-13d4-4605-8eda-313cd1740e14","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4ead58d-9502-4f1c-a923-23128e88b40e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/96e6d5925b45"]}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/96e6d5925b45"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4ead58d-9502-4f1c-a923-23128e88b40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"065fdf82-13d4-4605-8eda-313cd1740e14","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e44515.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e44515/rate-test-model-e44515\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e44515/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4ec5f0e-c9c4-47ad-b53f-0c77327bef88","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33344","PortSpecifier":{"PortValue":33344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","method":"POST","path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33344","PortSpecifier":{"PortValue":33344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757245,"nanos":679025887},"http":{"id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD\"}"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","subscription":"e2e-rate-iso-a-ddd760","tenant":"e2e-shared-a-bddd55","userId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\",\"requestedSubscription\":\"e2e-rate-iso-a-ddd760\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ddd760"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","selected_subscription":"e2e-rate-iso-a-ddd760","selected_subscription_key":"ai-tenant-e2e-shared-a-bddd55/e2e-rate-iso-a-ddd760@ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57c952f3-a3d7-414f-8c88-eae4a9bc3e17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33360","PortSpecifier":{"PortValue":33360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","method":"POST","path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33360","PortSpecifier":{"PortValue":33360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757246,"nanos":739505323},"http":{"id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD"}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD\"}"}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","subscription":"e2e-rate-iso-a-ddd760","tenant":"e2e-shared-a-bddd55","userId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\",\"requestedSubscription\":\"e2e-rate-iso-a-ddd760\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"}}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ddd760"}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","selected_subscription":"e2e-rate-iso-a-ddd760","selected_subscription_key":"ai-tenant-e2e-shared-a-bddd55/e2e-rate-iso-a-ddd760@ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6fe267c-cd15-4ecb-b469-a648efec6bf5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33366","PortSpecifier":{"PortValue":33366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f313fb47-88d2-4207-a5d6-d7385925970e","method":"POST","path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33366","PortSpecifier":{"PortValue":33366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757247,"nanos":778257426},"http":{"id":"f313fb47-88d2-4207-a5d6-d7385925970e","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD"}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD\"}"}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","subscription":"e2e-rate-iso-a-ddd760","tenant":"e2e-shared-a-bddd55","userId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\",\"requestedSubscription\":\"e2e-rate-iso-a-ddd760\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"}}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ddd760"}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","selected_subscription":"e2e-rate-iso-a-ddd760","selected_subscription_key":"ai-tenant-e2e-shared-a-bddd55/e2e-rate-iso-a-ddd760@ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f313fb47-88d2-4207-a5d6-d7385925970e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33368","PortSpecifier":{"PortValue":33368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","method":"POST","path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33368","PortSpecifier":{"PortValue":33368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757248,"nanos":813429256},"http":{"id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD"}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD\"}"}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","subscription":"e2e-rate-iso-a-ddd760","tenant":"e2e-shared-a-bddd55","userId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\",\"requestedSubscription\":\"e2e-rate-iso-a-ddd760\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"}}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ddd760"}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","selected_subscription":"e2e-rate-iso-a-ddd760","selected_subscription_key":"ai-tenant-e2e-shared-a-bddd55/e2e-rate-iso-a-ddd760@ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afddb7f9-bfdc-4753-8f4c-657bac6e7bed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33374","PortSpecifier":{"PortValue":33374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"123aea53-6221-46eb-9074-4c136e9a9a50","method":"POST","path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33374","PortSpecifier":{"PortValue":33374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757249,"nanos":851051473},"http":{"id":"123aea53-6221-46eb-9074-4c136e9a9a50","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD"}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD\"}"}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","subscription":"e2e-rate-iso-a-ddd760","tenant":"e2e-shared-a-bddd55","userId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\",\"requestedSubscription\":\"e2e-rate-iso-a-ddd760\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"}}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ddd760"}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","selected_subscription":"e2e-rate-iso-a-ddd760","selected_subscription_key":"ai-tenant-e2e-shared-a-bddd55/e2e-rate-iso-a-ddd760@ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"123aea53-6221-46eb-9074-4c136e9a9a50","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33378","PortSpecifier":{"PortValue":33378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","method":"POST","path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33378","PortSpecifier":{"PortValue":33378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757250,"nanos":902872460},"http":{"id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD"}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD\"}"}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","subscription":"e2e-rate-iso-a-ddd760","tenant":"e2e-shared-a-bddd55","userId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\",\"requestedSubscription\":\"e2e-rate-iso-a-ddd760\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"}}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ddd760"}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","selected_subscription":"e2e-rate-iso-a-ddd760","selected_subscription_key":"ai-tenant-e2e-shared-a-bddd55/e2e-rate-iso-a-ddd760@ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed4f1c7-5fff-4962-b1ac-93d8ec1404e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48450","PortSpecifier":{"PortValue":48450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","method":"POST","path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48450","PortSpecifier":{"PortValue":48450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757251,"nanos":940512107},"http":{"id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD"}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fMNBWzLqa0xoBTy8_fvy5wTiaEqthXqrZvKEuePuKvUw3Xq9EfBfGX6B4LcD\"}"}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","subscription":"e2e-rate-iso-a-ddd760","tenant":"e2e-shared-a-bddd55","userId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\",\"requestedSubscription\":\"e2e-rate-iso-a-ddd760\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"}}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ddd760"}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a79655e-9e92-4058-a8bb-c7f5fcf15ede","keyName":"e2e-rate-a-ddd760","selected_subscription":"e2e-rate-iso-a-ddd760","selected_subscription_key":"ai-tenant-e2e-shared-a-bddd55/e2e-rate-iso-a-ddd760@ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ddd760","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e15ffc6-7de1-497f-93d4-e3eb73b71f1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48456","PortSpecifier":{"PortValue":48456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f387a5c-1616-4a5d-936b-822f329fd725","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48456","PortSpecifier":{"PortValue":48456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757259,"nanos":109229931},"http":{"id":"1f387a5c-1616-4a5d-936b-822f329fd725","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"065fdf82-13d4-4605-8eda-313cd1740e14","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4ead58d-9502-4f1c-a923-23128e88b40e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/96e6d5925b45"]}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/96e6d5925b45"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4ead58d-9502-4f1c-a923-23128e88b40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"065fdf82-13d4-4605-8eda-313cd1740e14","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fcbb708e6463f92475ca7323eab49e92781f543c853e60059fa7a4471bc1be91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f387a5c-1616-4a5d-936b-822f329fd725","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48738","PortSpecifier":{"PortValue":48738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e44515.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48738","PortSpecifier":{"PortValue":48738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757259,"nanos":143574053},"http":{"id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","method":"POST","headers":{":authority":"e2e-shared-b-e44515.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"065fdf82-13d4-4605-8eda-313cd1740e14","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4ead58d-9502-4f1c-a923-23128e88b40e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/96e6d5925b45"]}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/96e6d5925b45"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4ead58d-9502-4f1c-a923-23128e88b40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"065fdf82-13d4-4605-8eda-313cd1740e14","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e44515.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e44515/rate-test-model-e44515\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e44515/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88cd9494-2347-4171-bd4b-3f81ec6f51cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48472","PortSpecifier":{"PortValue":48472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","method":"POST","path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48472","PortSpecifier":{"PortValue":48472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757259,"nanos":179588139},"http":{"id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wg1OmPjusQx7iSoU_bJiuTjvGGmRYZT7YEbLCDG2FQTBI4zV6WZjDP9OxS3F"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wg1OmPjusQx7iSoU_bJiuTjvGGmRYZT7YEbLCDG2FQTBI4zV6WZjDP9OxS3F\"}"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"850209b5-614e-401b-a66c-f01c3476da27","keyName":"e2e-rate-a-a3048f","subscription":"e2e-rate-iso-a-a3048f","tenant":"e2e-shared-a-bddd55","userId":"850209b5-614e-401b-a66c-f01c3476da27","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\",\"requestedSubscription\":\"e2e-rate-iso-a-a3048f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3048f","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3048f"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"850209b5-614e-401b-a66c-f01c3476da27","keyName":"e2e-rate-a-a3048f","selected_subscription":"e2e-rate-iso-a-a3048f","selected_subscription_key":"ai-tenant-e2e-shared-a-bddd55/e2e-rate-iso-a-a3048f@ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3048f","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74dc65b0-b989-4ce9-b7d9-b9129ed5c3c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48482","PortSpecifier":{"PortValue":48482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5dc610d-df0c-4381-aa02-a4152fd60442","method":"POST","path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48482","PortSpecifier":{"PortValue":48482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757260,"nanos":214328625},"http":{"id":"c5dc610d-df0c-4381-aa02-a4152fd60442","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wg1OmPjusQx7iSoU_bJiuTjvGGmRYZT7YEbLCDG2FQTBI4zV6WZjDP9OxS3F"}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wg1OmPjusQx7iSoU_bJiuTjvGGmRYZT7YEbLCDG2FQTBI4zV6WZjDP9OxS3F\"}"}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"850209b5-614e-401b-a66c-f01c3476da27","keyName":"e2e-rate-a-a3048f","subscription":"e2e-rate-iso-a-a3048f","tenant":"e2e-shared-a-bddd55","userId":"850209b5-614e-401b-a66c-f01c3476da27","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\",\"requestedSubscription\":\"e2e-rate-iso-a-a3048f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3048f","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"}}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3048f"}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"850209b5-614e-401b-a66c-f01c3476da27","keyName":"e2e-rate-a-a3048f","selected_subscription":"e2e-rate-iso-a-a3048f","selected_subscription_key":"ai-tenant-e2e-shared-a-bddd55/e2e-rate-iso-a-a3048f@ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3048f","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5dc610d-df0c-4381-aa02-a4152fd60442","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48494","PortSpecifier":{"PortValue":48494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"962af2a3-3233-4adb-a311-fa5d80afb858","method":"POST","path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions","host":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48494","PortSpecifier":{"PortValue":48494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757261,"nanos":245910734},"http":{"id":"962af2a3-3233-4adb-a311-fa5d80afb858","method":"POST","headers":{":authority":"e2e-shared-a-bddd55.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wg1OmPjusQx7iSoU_bJiuTjvGGmRYZT7YEbLCDG2FQTBI4zV6WZjDP9OxS3F"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wg1OmPjusQx7iSoU_bJiuTjvGGmRYZT7YEbLCDG2FQTBI4zV6WZjDP9OxS3F\"}"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"850209b5-614e-401b-a66c-f01c3476da27","keyName":"e2e-rate-a-a3048f","subscription":"e2e-rate-iso-a-a3048f","tenant":"e2e-shared-a-bddd55","userId":"850209b5-614e-401b-a66c-f01c3476da27","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\",\"requestedSubscription\":\"e2e-rate-iso-a-a3048f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bddd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3048f","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bddd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3048f"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"850209b5-614e-401b-a66c-f01c3476da27","keyName":"e2e-rate-a-a3048f","selected_subscription":"e2e-rate-iso-a-a3048f","selected_subscription_key":"ai-tenant-e2e-shared-a-bddd55/e2e-rate-iso-a-a3048f@ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bddd55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3048f","namespace":"ai-tenant-e2e-shared-a-bddd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bddd55/rate-test-model-bddd55"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"962af2a3-3233-4adb-a311-fa5d80afb858","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48742","PortSpecifier":{"PortValue":48742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1b52586-f98c-4ed0-be53-3e25593578ff","method":"POST","path":"/ai-tenant-e2e-shared-b-e44515/rate-test-model-e44515/v1/completions","host":"e2e-shared-b-e44515.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48742","PortSpecifier":{"PortValue":48742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784757261,"nanos":281312529},"http":{"id":"f1b52586-f98c-4ed0-be53-3e25593578ff","method":"POST","headers":{":authority":"e2e-shared-b-e44515.apps.f73aed21-7cbc-4de2-9702-96e6d5925b45.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e44515/rate-test-model-e44515/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O8Ii3TOuQep1gylH_cKJuh8eMik1yJt4H1R2U3yJ9K1Wq49fpMeBuMovbrUX"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e44515.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O8Ii3TOuQep1gylH_cKJuh8eMik1yJt4H1R2U3yJ9K1Wq49fpMeBuMovbrUX\"}"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e44515.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"907d87eb-f245-40ba-becc-2b5f34e8a56f","keyName":"e2e-rate-b-a3048f","subscription":"e2e-rate-iso-b-a3048f","tenant":"e2e-shared-b-e44515","userId":"907d87eb-f245-40ba-becc-2b5f34e8a56f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e44515.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e44515/rate-test-model-e44515\",\"requestedSubscription\":\"e2e-rate-iso-b-a3048f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e44515.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e44515","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a3048f","namespace":"ai-tenant-e2e-shared-b-e44515","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-e44515/rate-test-model-e44515"}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e44515/rate-test-model-e44515\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e44515/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a3048f"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"907d87eb-f245-40ba-becc-2b5f34e8a56f","keyName":"e2e-rate-b-a3048f","selected_subscription":"e2e-rate-iso-b-a3048f","selected_subscription_key":"ai-tenant-e2e-shared-b-e44515/e2e-rate-iso-b-a3048f@ai-tenant-e2e-shared-b-e44515/rate-test-model-e44515","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e44515","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a3048f","namespace":"ai-tenant-e2e-shared-b-e44515","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-e44515/rate-test-model-e44515"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T21:54:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1b52586-f98c-4ed0-be53-3e25593578ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T21:54:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32a39dd6460946b3340ccbf0267c69e7a2eb154637e9031faad0c4a4ae926ddc"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ed3596a0364e933272c291744c2ba918e8badcec4e0911e93f535f6630b979b"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb3e312f3c103d677d056b335c2b13c497fd9b947e159b12e6015391eaaaf694"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d7211b7908cc095044dffa1750730a266701e4483076faf357bafe35a62a59b"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bd58f9371af27905548b884abbcfb1cceb207bdecbd02c6ef0ac5416eec2365"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/808b84c0e524b21abbbaab4820b3f6c66d105abcacc04a3bae891e1d527c8f93"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd8f91c1b6b2afda7482eb99f91515e23b777aabcc87eb84fc91653c0d8bdc9d"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5062ea4d00afd9348fc444379a3492578fcfbd81bb08258e5b015dbb52b8792"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a5a2c06cb4a51ead094073e38e4db1c0aec406f914665a479b7cd19354cadc6"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c954436c2dfb539050f0a1ff35853bd9d6ada7d26e911c9a641d59cddb931356"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7314c9cf87001f0d34ddcc0d8f148ef83eacfbcfa43392b651f26a772930a97e"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/038de57031fa9277e8df8d335398c54652a3c6219d9e65fdddc42f1086f31d2e"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2de37d35baebdf8e8627dc34a6aadc456984d6dabb60ecbca06ff87ca8592e58"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23e2f7f1494ad25ce11e265399791ffd6ef8a9427119f394aeb48d4429855386"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61574b71cf2f2d4759a15b771073e0366fa2e0f45635a0404aa36c4c09f88b03"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7831be1bb6aee9eee83cf5ae22c681f180b5fe2277ad511884a55181fa55cb1"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27b8de3ad77deb183c404c0491234447f9ff7c6d340525e6b1b46ce040a0399c"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99a271db9ddf978a4eeadc7511726a1232eca6017d86ab433cf0dd0b002a90cc"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39705c58c1e8d9964bc0adb6c24a6e3702790992091674095254d292d4fc504c"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7112a86bd117dc036e7d6ee1d2e394fcd850360c60f9cc7187d9e6767fcd9ed7"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e0bcf2c71ffe503df8fb508080ae94c7cbd5625a759645be28819d2c5e8fd74"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80cda42764ce47e50a61106deee2d9145659e054f8ebe5180e8113a7b997e1bf"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcbb708e6463f92475ca7323eab49e92781f543c853e60059fa7a4471bc1be91"}
{"level":"info","ts":"2026-07-22T21:54:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe55a4853d2baa8117ee27cab576e9b36097cbc3c3cf51e98137d8687d6d5060"}