{"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ff253f849fa7a2e9ae0e1cd6f56ae169d8e6e6fd71329bfb3200f429f9bacd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5c169246e4c0030670367c2b35fd5cf01fe5d5666c8a26525c777772c79c252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b29b7e86d7018998db8643b52feb0f294e245e99c44e512df353d31f8b70c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"}
{"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"}
{"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"}
{"level":"error","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53630","PortSpecifier":{"PortValue":53630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53630","PortSpecifier":{"PortValue":53630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945747,"nanos":830717527},"http":{"id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55692","PortSpecifier":{"PortValue":55692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68cb9466-e962-4af4-9e8a-af1b471ad794","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55692","PortSpecifier":{"PortValue":55692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945747,"nanos":869267427},"http":{"id":"68cb9466-e962-4af4-9e8a-af1b471ad794","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53642","PortSpecifier":{"PortValue":53642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd2c8089-ea82-4e84-9303-b14e646f783f","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53642","PortSpecifier":{"PortValue":53642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945747,"nanos":931474792},"http":{"id":"cd2c8089-ea82-4e84-9303-b14e646f783f","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b\"}"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","subscription":"e2e-rate-iso-a-841cb2","tenant":"e2e-shared-a-7e06ec","userId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-841cb2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-841cb2"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","selected_subscription":"e2e-rate-iso-a-841cb2","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-841cb2@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53654","PortSpecifier":{"PortValue":53654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53654","PortSpecifier":{"PortValue":53654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945749,"nanos":25182555},"http":{"id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b"}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b\"}"}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","subscription":"e2e-rate-iso-a-841cb2","tenant":"e2e-shared-a-7e06ec","userId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-841cb2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-841cb2"}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","selected_subscription":"e2e-rate-iso-a-841cb2","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-841cb2@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53656","PortSpecifier":{"PortValue":53656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e88fa8db-3662-43a8-a25f-27373e3429d2","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53656","PortSpecifier":{"PortValue":53656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945750,"nanos":69231881},"http":{"id":"e88fa8db-3662-43a8-a25f-27373e3429d2","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b"}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b\"}"}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","subscription":"e2e-rate-iso-a-841cb2","tenant":"e2e-shared-a-7e06ec","userId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-841cb2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-841cb2"}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","selected_subscription":"e2e-rate-iso-a-841cb2","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-841cb2@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"151d14ee-4605-47e0-8532-4111224e0c22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39350","PortSpecifier":{"PortValue":39350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"151d14ee-4605-47e0-8532-4111224e0c22","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"151d14ee-4605-47e0-8532-4111224e0c22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39350","PortSpecifier":{"PortValue":39350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945776,"nanos":506822722},"http":{"id":"151d14ee-4605-47e0-8532-4111224e0c22","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"151d14ee-4605-47e0-8532-4111224e0c22","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"151d14ee-4605-47e0-8532-4111224e0c22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"151d14ee-4605-47e0-8532-4111224e0c22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"151d14ee-4605-47e0-8532-4111224e0c22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51954","PortSpecifier":{"PortValue":51954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86089266-372b-4f8b-a875-7cc1fe8b384a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51954","PortSpecifier":{"PortValue":51954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945776,"nanos":551215053},"http":{"id":"86089266-372b-4f8b-a875-7cc1fe8b384a","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39352","PortSpecifier":{"PortValue":39352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c259fea5-0c14-4072-be14-67a2aebbadac","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39352","PortSpecifier":{"PortValue":39352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945776,"nanos":583719739},"http":{"id":"c259fea5-0c14-4072-be14-67a2aebbadac","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV\"}"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","subscription":"e2e-rate-iso-a-15692e","tenant":"e2e-shared-a-7e06ec","userId":"92edea01-44d9-41a1-80eb-47ab57710e37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-15692e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15692e"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","selected_subscription":"e2e-rate-iso-a-15692e","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-15692e@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39362","PortSpecifier":{"PortValue":39362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39362","PortSpecifier":{"PortValue":39362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945777,"nanos":631239172},"http":{"id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV"}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV\"}"}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","subscription":"e2e-rate-iso-a-15692e","tenant":"e2e-shared-a-7e06ec","userId":"92edea01-44d9-41a1-80eb-47ab57710e37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-15692e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15692e"}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","selected_subscription":"e2e-rate-iso-a-15692e","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-15692e@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39374","PortSpecifier":{"PortValue":39374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39374","PortSpecifier":{"PortValue":39374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945778,"nanos":668683953},"http":{"id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV\"}"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","subscription":"e2e-rate-iso-a-15692e","tenant":"e2e-shared-a-7e06ec","userId":"92edea01-44d9-41a1-80eb-47ab57710e37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-15692e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15692e"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","selected_subscription":"e2e-rate-iso-a-15692e","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-15692e@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51968","PortSpecifier":{"PortValue":51968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","method":"POST","path":"/ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7/v1/completions","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51968","PortSpecifier":{"PortValue":51968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945778,"nanos":703635183},"http":{"id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2Hd3ToG7vyEZnfRF_q1nWPiES2iL9K7wavfdgttAm3VKWYDN9OZHPCooAyq8"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2Hd3ToG7vyEZnfRF_q1nWPiES2iL9K7wavfdgttAm3VKWYDN9OZHPCooAyq8\"}"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"388fe56b-f43c-47ae-90af-00213af58942","keyName":"e2e-rate-b-15692e","subscription":"e2e-rate-iso-b-15692e","tenant":"e2e-shared-b-575aa7","userId":"388fe56b-f43c-47ae-90af-00213af58942","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7\",\"requestedSubscription\":\"e2e-rate-iso-b-15692e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m","name":"rate-test-model-575aa7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-15692e","namespace":"ai-tenant-e2e-shared-b-575aa7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7"}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-15692e"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"388fe56b-f43c-47ae-90af-00213af58942","keyName":"e2e-rate-b-15692e","selected_subscription":"e2e-rate-iso-b-15692e","selected_subscription_key":"ai-tenant-e2e-shared-b-575aa7/e2e-rate-iso-b-15692e@ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m","name":"rate-test-model-575aa7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-15692e","namespace":"ai-tenant-e2e-shared-b-575aa7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeea06af48d6201646745b8f322fbae8a390b1bdf576939f86f1fd136ec87004"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efd16a90a7390e28805039c52d5c2c7368f90e8e41bdee2f209c702acc948c84"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b29b7e86d7018998db8643b52feb0f294e245e99c44e512df353d31f8b70c70"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5c169246e4c0030670367c2b35fd5cf01fe5d5666c8a26525c777772c79c252"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e771dde3d752558350164761ac756f840fa8b56710386d1ce1e6b499c0ae9251"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0007962331cc153c88d32ce2364da0b606d1a3b7751cf76166df5a7554f894c"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e064f86626ee8ee1cf6c570e2a54ee9719d7d8717e861bb8c51b75497cfefc4c"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c"}
{"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0ff253f849fa7a2e9ae0e1cd6f56ae169d8e6e6fd71329bfb3200f429f9bacd"}
{"level":"info","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f75079b-1996-4558-b682-978c45be0c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59354","PortSpecifier":{"PortValue":59354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f75079b-1996-4558-b682-978c45be0c4a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f75079b-1996-4558-b682-978c45be0c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59354","PortSpecifier":{"PortValue":59354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945845,"nanos":866783682},"http":{"id":"2f75079b-1996-4558-b682-978c45be0c4a","method":"POST","headers":{":authority":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f75079b-1996-4558-b682-978c45be0c4a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f75079b-1996-4558-b682-978c45be0c4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f75079b-1996-4558-b682-978c45be0c4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f75079b-1996-4558-b682-978c45be0c4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59368","PortSpecifier":{"PortValue":59368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59368","PortSpecifier":{"PortValue":59368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945845,"nanos":911612761},"http":{"id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","method":"POST","headers":{":authority":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12CONOwxVQTqAxBvu_D8Qu49LNRJ6VwyBrSnsNRGwfG2l4oIwDYDAOJWJycvW"}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12CONOwxVQTqAxBvu_D8Qu49LNRJ6VwyBrSnsNRGwfG2l4oIwDYDAOJWJycvW\"}"}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d63ed7a-be00-4a30-a12e-92a8741fc4eb","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"3d63ed7a-be00-4a30-a12e-92a8741fc4eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d63ed7a-be00-4a30-a12e-92a8741fc4eb","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"}
{"level":"info","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"}
{"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"}
{"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"}
{"level":"error","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf"}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"}
{"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f"}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf"}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"}
{"level":"info","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-67eb46.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945904,"nanos":66924704},"http":{"id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","method":"POST","headers":{":authority":"e2e-ipp-a-67eb46.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}}
{"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-67eb46.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-67eb46/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38890","PortSpecifier":{"PortValue":38890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0689ca89-4372-4554-8d8a-cbc00de3456c","method":"POST","path":"/ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46/v1/chat/completions","host":"e2e-ipp-a-67eb46.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38890","PortSpecifier":{"PortValue":38890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945906,"nanos":129771091},"http":{"id":"0689ca89-4372-4554-8d8a-cbc00de3456c","method":"POST","headers":{":authority":"e2e-ipp-a-67eb46.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GThQkxqUOjZOYjym_afQkS8RLNKRsfFVKNmqEr7m9TLEZigyplIkkApmp0Kg"}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-67eb46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GThQkxqUOjZOYjym_afQkS8RLNKRsfFVKNmqEr7m9TLEZigyplIkkApmp0Kg\"}"}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-67eb46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f7426b5-41a3-486b-a946-9866196406f5","keyName":"e2e-ipp-67eb46","subscription":"ipp-route-67eb46-sub","tenant":"e2e-ipp-a-67eb46","userId":"7f7426b5-41a3-486b-a946-9866196406f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-67eb46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46\",\"requestedSubscription\":\"ipp-route-67eb46-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-67eb46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-67eb46/models/facebook/opt-125m","name":"ipp-route-67eb46","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-67eb46-sub","namespace":"ai-tenant-e2e-ipp-a-67eb46","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46"}}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-67eb46/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-67eb46-sub"}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f7426b5-41a3-486b-a946-9866196406f5","keyName":"e2e-ipp-67eb46","selected_subscription":"ipp-route-67eb46-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46-sub@ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-67eb46/models/facebook/opt-125m","name":"ipp-route-67eb46","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-67eb46-sub","namespace":"ai-tenant-e2e-ipp-a-67eb46","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-25T02:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"}
{"level":"info","ts":"2026-07-25T02:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"}
{"level":"info","ts":"2026-07-25T02:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"}
{"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf"}
{"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179"}
{"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"}
{"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"}
{"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf"}
{"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"}
{"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"}
{"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"}
{"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f"}