Stuck on Keto AuthZ with Oathkeeper

[allidoisace]

When hitting the url with the list-rule I get access denied even if I just created the object with the relation tuple specific to the subject I am logged into. When I look at the keto logs, I see 4 relation tuples get created with everything I expect. Below is the access denied log from keto followed by the config and rules code.

oathkeeper-configmap.yaml

...
authorizers:
      allow:
        enabled: true
      deny:
        enabled: true
      remote_json:
        enabled: true
        config:
          remote: http://keto:5008/check
          payload: |
            {
              "subject_id": "{{ print .Subject }}",
              "namespace": "{{ printIndex .MatchContext.RegexpCaptureGroups 0 }}",
              "object": "{{ printIndex .MatchContext.RegexpCaptureGroups 1 }}",
              "relation": "{{ print .MatchContext.Method }}"
            }
          forward_response_headers_to_upstream:
            - ''
...

rules.yaml

- id: list-rule
      version: v0.38.0
      match:
        url: <.*>/v1/<[a-z-]+>
        methods:
          - GET
      authenticators:
        - handler: jwt
      authorizer:
        handler: remote_json
        config:
         remote: http://keto:5008/check
         payload: |
          {
            "subject_id": "{{ print .Subject }}",
            "namespace": "{{ printIndex .MatchContext.RegexpCaptureGroups 0 }}",
            "object": "{{ printIndex .MatchContext.RegexpCaptureGroups 1 }}",
            "relation": "{{ print .MatchContext.Method }}"
          }
      mutators:
        - handler: noop
      errors:
        - handler: json

[allidoisace]

Resolved due to some of the Regex values being wrong. Very hard to debug because logging is not very verbose.